Cybersecurity
Incident Response
Contain, investigate, and recover.
Read moreCybersecurity
Digital Forensics
Evidence handling and analysis.
Collection, preservation, and analysis of digital evidence following an incident or suspected policy violation. Engagements follow appropriate legal, privacy, and evidence-handling requirements.
When this applies
You may need this if
- You need to establish what an attacker actually accessed
- An internal matter may lead to disciplinary or legal action
- Regulatory or contractual notification depends on the facts
Scope
What the engagement covers
- Computer and endpoint forensic analysis
- Email and account activity investigation
- Log analysis and timeline reconstruction
- File activity analysis
- Evidence preservation and chain of custody
- Data recovery support
- Forensic reporting
Outcome
What you are left with
- A defensible account of what happened and when
- Evidence handled so it remains usable
- A factual basis for notification decisions