← All services04 HAT capability

Digital Forensics

Understand what happened through disciplined evidence acquisition, analysis and documentation designed to preserve integrity throughout the investigation.

Discuss this service
What this changes

Security work should create a usable outcome.

01

Reliable incident timeline

02

Preserved evidence integrity

03

Clear technical findings

04

Decision-ready reporting

Scope

What the engagement can include.

Final scope, coverage, response windows and deliverables are agreed before commencement.

Forensic acquisition
Disk and file-system analysis
Deleted-file recovery
User-activity analysis
Chain-of-custody documentation
Forensic findings report
Method

A clear route from start to finish.

01Authorise
02Acquire
03Preserve
04Analyse
05Report
Next step

Let’s define the right scope.

Share your environment, concern and desired outcome. We’ll respond with the questions that matter.

Request assessment