Network forensics: Methodical literature review

Nowadays network grow explosively and crime related to the network is increasing. Network Forensics is a sub-division of digital forensics and it mainly focus on the analysis of network traffic and monitors the intrusion. Network Forensics can focus on volatile and dynamic data but digital forensics is focus on stored and static data. Whenever intrusions are detected on network, then network forensics capture and record that activity for investigation process after the collection of intrusion activity analysis, perform on the network traffic. This paper is exhaustive survey of network forensics from 2005. In this paper, initially present the introduction about the network forensics and followed by their related work of various survey paper and then a study of various Network Forensics Analysis tools (NFATs) and their process model.