what is network forensics
Network forensics is a sub-branch of digital forensics relating to the monitoring and analysis of computer network traffic for the purposes of information gathering, legal evidence, or intrusion detection.Unlike other areas of digital forensics, network investigations deal with volatile and dynamic information.Network traffic is transmitted and then lost, so network forensics is often a pro-active investigation. Network forensics generally has two uses.etwork forensics can be performed as a standalone investigation or alongside a computer forensics analysis (where it is often used to reveal links between digital devices or reconstruct how a crime was committed).