Watch this video on YouTube
What is the PRIMARY purpose of a forensic investigation during the analysis phase of an incident response?