When it's too late to stop an attack, the next urgent task is to find out what happened and assess the damage.

Forensic experts can't just delete a sketchy file – sometimes the challenge is to see what is in it without triggering an attack. Learn about some of the tools investigators use for analyzing suspicious files.