InvestigaBit / Law firms
Technical forensic support to clarify questions, acquire data and reconstruct events within an engagement defined with the firm.
Activities and deliverables are defined according to the case and the available material.
Devices or digital data may contain information relevant to a case.
The work
Definition of the material to examine, acquisition and analysis within the engagement, and documentation of the work.
The deliverable
A technical report setting out the methodology, findings and analysis limitations.
Establish when and how particular activities took place.
The work
Examination of logs, files and other available data, correlating relevant events over time.
The deliverable
An evidence-based reconstruction of observable events and any gaps.
A case requires specialist analysis of systems, access or potential cybercrime.
The work
Clarification of technical questions, analysis of available evidence and discussion of the findings.
The deliverable
Clear technical documentation and help interpreting digital evidence.
Timing and fees
Device count, data volume, accessibility, complexity and urgency affect the work. An initial description helps define the approach and clarify fees before the engagement.
Start with the problem, your objective and the material available. Agree on a suitable channel before transmitting sensitive information.