Home / Forensic IT services
Forensic IT services
Secure the evidence before analysing it.
An analysis is only worth as much as the data it is based on. We secure storage media, accounts and paper files in a way that later proves: what was analysed is exactly what was secured – unchanged.
Sources
Everything that holds records
We read out servers and IT systems, take over mail accounts and mobile devices, and digitise paper. Damaged, supposedly deleted or destroyed data can often be reconstructed.
Process
From securing to providing
Sources
servers, mail accounts, PCs, laptops, smartphones, paper files
Preservation
image, checksum, log
Digitisation
scanning, text recognition, uniform formats
Analysis
Quantum: search, statistics, analysis
Provision
access for authorised users, archive
Secure
- Data transfer from servers, mail accounts, PCs, laptops and smartphones
- Reading out IT systems and accounts
Preserve as evidence
- Expert Witness data preservation
- Checksums and a log of every step
- Certified working methods
Make readable
- Scanning paper files, digitising analogue records
- Recovery of damaged data
Provide
- Access for authorised users, at any time and from anywhere
- Archiving (storage)
Checksum
One character changed – a completely different checksum
When securing data, we compute a checksum (here SHA-256) for every image and every file and record it in the log. Anyone who repeats the calculation later sees immediately whether even a single character has changed.
Evidence-proof data capture is more than copying. Only this way can you rule out that the secured data are later challenged as manipulated.
Try it: change a single digit in the field on the right.
Security
Your data do not leave our premises
Secured data and analyses are stored on our own servers on our premises – not in someone else’s cloud.
We work with redundant systems and BSI-certified hardware.
Strict data and user permissions under the GDPR; every access is logged with user and time.
Contact
Let’s talk.
Tell us your question – we will tell you which data we need and how we would proceed.