In the context of Digital Forensics we help you investigate IT security incidents. We will reconstruct suspicious activity, investigate digital evidence and if necessary collect evidence that may be used in courts.
If an active cyber thread is ongoing in your system we will help you to respond effectively and collect as much information as possible.
Among many forensic professionals it has long been recognized that the tradition approach (shutdown and secure all affected systems) can be an overly conservative approach that can destroy valuable evidence.
In the traditional approach, the following steps are performed:
We are able to collect volatile evidence in a forensically sound manner without 'pulling the plug'. This leads often to a higher accurately, cost savings and a better understanding of the incident.
Depending on the situation, we will decide together for one of these strategies to achieve the most efficient outcome.
In addition, we would like to help you in preventing further security incidents.
Give us a call, we look forward to it. +49 69 15322864