Network forensics is the retrospective analysis of network traffic for the purpose of conducting an investigation. You can use Omnipeek and the Capture Engines to capture, store, and data mine large volumes of traffic data in order to investigate items such as network problems, security attacks, HR policy violations, and more.

See Forensic Search or online help for information on how to perform a forensic search on your own network.