#Digital Forensics

También: dfir, computer forensics

Collecting and analysing digital evidence after security incidents. Covers disk and memory forensics, log and timeline analysis, chain of custody, and tools such as Volatility and Autopsy.