The present investigation raises the importance of the relationship between memory and the management of digital evidence against a forensic investigation, through the analysis of techniques, methodologies and tools that allow the forensic compilation of information in this component available in each device. Considering the different factors that must be taken into account, as well as the types of existing memory in order to reach the conclusion of their importance in front of the legal processes and forensic scenarios in which they are analyzed.

Network Forensics is a sub-branch of digital forensics responsible for the collection of data that passes through the network, through techniques that perform IP tracking, network monitoring technique, packet capture and compilation of documents. All these techniques are carried out with different programs, for this article MyLanViewer and WireShark are used because they provide tools for network monitoring, packet capture, IP tracking, IP recognition and are free, throughout the article will be deepened in the architecture of the network, the typologies and topologies that exist according to the needs of the network.