Which option best describes the purpose of packet capture in a forensic investigation?

A. To support network evidence collection during an investigation. B. To perform hard disk imaging without authorization. C. To replace all legal documentation. D. To avoid evidence documentation.