What is the primary purpose of forensic analysis during an incident response?
To deploy new security controls to prevent future incidents
To inform stakeholders about the recovery plan
To restore systems to operational status
To identify and reconstruct the sequence of events leading up to and during the incident