Ethernet Forensics

The examination of network traffic over Ethernet connections to uncover evidence of data transfers, intrusions, or other activities in a forensic investigation.