A security student reads the description: analyzing malicious code and related artifacts after compromise. Which term matches it?

A. Network forensics B. Database forensics C. Correlation rule D. Malware forensics