Scientific process of capturing and analyzing electronic data to investigate and establish digital activity narratives.

Responds to security incidents by assessing scope, acquiring data, analyzing breaches, and assisting in threat containment and remediation.