The topic of this thesis is to conduct a detailed investigation into the field of computer forensics with the aim of identifying hackers, focusing on methods that enable hacker identification through the analysis of network traffic, system logs, and other digital evidence. The thesis addresses both the theoretical aspects of forensic analysis and practical applications, including the use of specialized tools for collecting, analyzing, and presenting evidence that is crucial for uncovering cyberattacks. Additionally, the thesis explores various techniques for detecting hacker activities, including system log analysis, identifying unauthorized access and behavior, and the use of Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS). Special emphasis is placed on statistical and mathematical methods that assist in predicting network vulnerabilities and determining the Expected Path Length (EPL) that an attacker must traverse to achieve their objective. The thesis also examines how these forensic tools and methods can be practically applied to prove cybercrime, with a particular focus on the challenges related to preserving the integrity of evidence and its admissibility in court proceedings. All these components are integrated to demonstrate the crucial role of forensic network analysis in maintaining security in the digital environment and successfully prosecuting hackers in the modern legal system.