Forensics refers to the post-incident investigation of cyberattacks. It involves collecting and analyzing digital evidence to understand how the attack happened, what was impacted, and who was responsible.