When a security incident occurs, the immediate priority is often containment. However, understanding what happened, how it happened, and what was affected is equally important. This is where digital forensics plays a critical role. Digital forensics involves the structured collection, preservation, and analysis of digital evidence from systems, endpoints, servers, and storage media. The goal...