Involves analysis of digital devices and data for evidence recovery in investigations. Employed by legal teams, corporate security departments, and law enforcement in finance, healthcare, and government sectors for compliance and incident response.