Digital Forensics

From the data collected, our Digital Forensics process sorts and analyzes the data to be used for investigative strategies.

Digital Forensics and Incident Response (DFIR)

Immediately following a cyber-attack or breach, there are two important questions that often get asked:

What happened?
How can we prevent this from happening again?

Digital Forensics is the process by which technology, business, and legal experts collect, examine, and analyze all of the data from compromised computer systems and storage devices. These methods are carried out in a manner consistent with proven standards and best practices to ensure that evidence could be admissible in a court of law if needed.

What happened? Digital Forensics
How can we prevent this from happening again?

Evidence collection includes identifying and securing affected devices, network nodes, and all data, including latent data, from the systems. Latent data is data that is not easily accessible and generally takes an expert to uncover. This data is often hidden or even deleted. Once the evidence is collected and evaluated, it undergoes a detailed analysis to determine important questions, including root cause, scope of breach, and what data may have been impacted. Each step of this process is carefully documented.

Evidence collection includes identifying and securing affected devices, network nodes, and all data, including latent data, from the systems. Latent data is data that is not easily accessible and generally takes Digital Forensics an expert to uncover. This data is often hidden or even deleted. Once the evidence is collected and evaluated, it undergoes a detailed analysis to determine important questions, including root cause, scope of breach, and what data may have been impacted. Each step of this process is carefully documented.

bt_bb_section_bottom_section_coverage_image

Digital Forge

Forensics
Teams

Digital Forge Forensics teams will conduct internal investigations with objectivity, empathy, respect, and discretion and provide your organization with a summary and present the information to cross-functional teams, where needed.

Digital Forensics will help establish timelines and identify any data which may have been compromised or exfiltrated, this is especially critical iw thpotentially porotected data classes such as Personally Identifiable Information (PII), Patient Health Information (PHI), and Electronic Patient Health Information (ePHI).