Cyber forensics, also known as digital forensics, is the practice of collecting, analyzing, and preserving digital evidence to investigate cybercrimes or to gather evidence for legal proceedings. It involves applying techniques from various fields such as computer science, law, and criminal justice to examine digital devices and data for signs of malicious activity, unauthorized access, or other forms of cyber wrongdoing.

Common tasks in cyber forensics include:

1. Evidence Collection: Gathering data from computers, servers, mobile devices, and other digital sources while preserving its integrity to ensure it can be used as evidence in court.
2. Data Analysis: Examining the collected evidence to identify relevant information, such as incriminating files, communication logs, or traces of malware.
3. Evidence Preservation: Storing and documenting evidence in a manner that maintains its integrity and admissibility in legal proceedings.
4. Incident Response: Responding to cybersecurity incidents by identifying the source of the breach, containing the damage, and collecting evidence to support remediation efforts.
5. Expert Testimony: Providing expert testimony in court to explain technical findings and help jurors understand the significance of digital evidence.

Cyber forensic professionals often use specialized tools and techniques to aid in their investigations, including disk imaging tools, network traffic analysis software, and forensic analysis frameworks. They must also stay up-to-date with evolving cyber threats and legal regulations to effectively investigate and prosecute cybercrimes.