Digital forensics tools can fall into many different categories, including database forensics, disk and data capture, email analysis, file analysis, file viewers, internet analysis, mobile device analysis, network forensics, and registry analysis.

Memory forensics is a vital form of cyber investigation that allows an investigator to identify unauthorized and anomalous activity on a target computer or server.

Network forensics, unsurprisingly, refers to the investigation and analysis of all traffic going across a network suspected of use in cyber crime, say the spread of data-stealing malware or the analysis of cyber attacks.

Autopsy is a digital forensics platform and graphical interface that forensic investigators use to understand what happened on a phone or computer.