Klementinus Kennyvito Salim

Network forensics is the analysis and report of network traffic that is being monitored. Usually it is for information gathering, evidence gathering, and also detection/prevention of an attack.

There are 2 types of investigative methods. One example is OSCAR which stands for Obtain information, Strategize, Collect evidence, Analyze, Report. Another example is TAARA which stands for Trigger, Acquire, Analyze, Report, Act.