Which concept is best described as capturing and analyzing network traffic for evidence or intrusion detection?

A. Email forensics B. Malware forensics C. Network forensics D. Rootkit