This module aims to equip students with comprehensive knowledge and practice on digital responses when businesses lose information security or serious incidents that directly affect system operation in enterprises. Digital forensics is a field concerned with the recovery and investigation of digital evidence found in digital devices, divided into three categories: computer forensics, network forensics, and forensics. terminal & mobile. In particular, network investigation (Network Forensics) focuses on intercepting, backing up and analyzing network traffic to serve investigation in the prevention of cybercrime. That said, this module also provides an overview of network investigation, introduces the process and some tools to assist in conducting the survey.