Forensics refers to scientific investigations based on systematic collection of evidence and analyzing them to explore facts which leads to science dedicated to the methodical gathering and analysis of evidence to establish facts that can be presented in a legal proceeding. Digital forensics refers to any investigation which aims to present digital evidence in court must be carried out in accordance with certain principles for the evidence to remain admissible.

Forensic utilities are automated tools which provide investigative platform to search, collect, scrutinize and analyze digital information in a systematic manner. These automated tools increase the pace of investigation with accurate analyses. Forensics utilities help in identifying root cause of breach

which facilitates security measures in an organization.

Forensics utilities play a critical role in reactive security measures when an incident is already occurred. They are unavoidable because identification of cause of breach becomes possible with such tools. Forensics tools are pivotal in incident handling procedures of an organization.