Micals also said the forensic capability of many tools can create an airtight case in relation to prosecution over unwanted data access and inappropriate use of corporate data, intellectual property and hacking incidents. However, many organizations still stubbornly refuse to prosecute.

"You are still going to require forensic or investigative skills to prosecute someone; most firms just find the problems and remediate, but network forensic tools make the evidence gathering easier," Micals said.