Disk forensics is a branch of digital forensics that involves the examination and analysis of digital storage devices, such as hard drives, solid-state drives (SSDs), USB drives, and other forms of storage media, to recover, identify, and preserve evidence.

It plays a critical role in investigations involving cybercrimes, data breaches, and legal disputes. Disk forensics aims to uncover information that may not be immediately visible, such as deleted files, hidden data, and fragmented data.