Which of the following is the primary purpose of forensic analysis in the context of incident response?
To update the incident response plan with new procedures
To identify, preserve, and analyze digital evidence
To conduct training sessions for the incident response team
To eliminate vulnerabilities and prevent future attacks