CISM: Certified Information Security Manager

Computer forensics analyzes preserved evidence such as logs, file-system metadata, memory, and disk artifacts to reconstruct the activities performed and changes made on an affected system during a cybersecurity incident.