Forensic Investigation

Definitions

1. An inquiry that uses preserved digital evidence to determine the scope, timeline, cause, and impact of suspicious or malicious activity. A forensic investigation may support incident response, litigation, compliance reporting, or law enforcement handoff.

   In plain English: A formal investigation that uses digital evidence to understand a security incident.

   Example: "The company launched a forensic investigation after learning the attacker had accessed executive mailboxes."

Related Terms

• Computer Forensics
• Digital Forensics
• Incident Forensics
• Memory Forensics
• Network Forensics
• Cloud Forensics
• Compromise Assessment
• Disk Forensics
• Emergency Patching
• Forensic Analysis
• Forensic Image
• Forensic Workstation
• Image Forensics
• Incident Investigation
• Incident Timeline
• IRP
• Live Forensics