As a forensic investigator, it is essential for you to know about all the aspects of the network that need to be looked at for a comprehensive investigation. Full visibility of your network and the ability to collect artifacts and evidence is important for successful forensic analysis. Some of the key aspects of forensic investigation that should be looked at include database forensics, email forensics, audio and video forensics, memory forensics, and a few others, as shown in the following diagram:
It is important that the forensic investigation process has effective evidence collection and storage capabilities for capturing and cataloging all meaningful artifacts. It should also have an automated investigation capability in order to be effective and efficient in searching and analysis across vast datasets. On top of this, it should have an acceptable reporting capability.
Forensic investigators like you are also encouraged to align your practices...