Network forensics core areas?
What do people consider to be the core concentration of work in relation to network forensics? as it could include both local and global networks.
I would also include in the network forensic banner - post network connection/hacking investigation. This seems to be a fairly specialist field requiring someone to understand how computers communicate (and log/write to disk this) and hence be able to target the investigation to such evidence areas.