Forensics enables organizations to investigate and better understand a breach, but it also can extract insight that can be used to prevent future compromises.