digital forensics

The processes and specialized techniques for gathering, retaining, and analyzing system related data (digital evidence) for investigative purposes. In the NICE Framework, cybersecurity work where a person: Collects, processes, preserves, analyzes, and presents computer related evidence in support of network vulnerability, mitigation, and/or criminal, fraud, counterintelligence or law enforcement investigations.