Digital forensics, a branch of forensic science, involves collecting and analyzing digital evidence from various devices to maintain its integrity for legal proceedings. The process includes data collection, examination, analysis, and reporting, often employing specialized tools and techniques. Different branches exist, such as computer, mobile device, and network forensics. The field's importance has grown significantly with increased reliance on digital technologies and the rise in cybercrime. Digital forensics and incident response (DFIR) integrates threat mitigation with evidence preservation for faster threat resolution and improved investigation outcomes.