In criminal investigations, forensic evidence is often used to prove that a person was at a particular place at a certain time, or even to show an irrefutable connection with a crime that has been committed. In the world of IT, network forensics can be used to identify how communications assets are being affected by data theft committed by internal sources, to track security exploits, and to spot violations of corporate security policies…
