Analysis into how attacks are formed. Done in the final phases of Incident Response Process in Forensics Process.