The examination of information contained in databases, both data and related metadata.
It analysis and recovery the email at the platform such as schedule and contacts.
It is sift through code to identify possible spiteful programs nd analyzing their payload.
Memory Forensic is the collection of information and data in system's RAM and Cache.
Looking for evidence by monitoring network traffic, using tools such as a firewall.