These digital forensic tools focus on capturing and analyzing network traffic to detect and investigate unauthorized activities including data breaches, hacking attempts, and malware distribution. Commonly used network forensic tools are Wireshark, NetWitness, and TCPdump that provide real-time monitoring, packet analysis and protocol decoding.