In today's world, many activities are done online - from playing video games to purchases to conducting business. We are connected to the Internet most of the day (think about doing school work, your job, and your smartphone). This is why understanding networks, their operation, and protocols are essential in forensics. We need to be able to collect networking data as it could provide valuable evidence in a digital forensics investigation. This is why we must understand how to capture networking data, log files, and email.
Recall that recovered data from a forensic investigation might be password protected. → (LO #2)
Understand the importance of networking equipment, services, and protocols concerning forensics. → (LO #3)
Analyze network traffic to determine specific information. → (LO #2)