IDS in Computer Forensics

looks at some aspects of the relationship between computer forensics and IDS, and specialized kinds of tools that can be used for intrusion analysis. For this session's conference, find and summarize an example of ways IDS tools or techniques are used in computer forensics. Your example might include a specific instance of where IDS contributed to a successful forensic investigation, or a more general description of how a product or type of IDS tool could be used in support of forensic analysis.