01
Agreement and scope
Bilateral NDA and proposal with scope, rules of engagement and windows defined in writing. Nothing starts without authorization.
← All services// Services · Forensics
Digital Forensics
Technical investigation of cyber incidents to determine how the attack happened, collect evidence and support legal action.
// What it is
What it is about
Digital forensics is the technical investigation that collects and preserves digital evidence of an incident to clarify what happened and, if necessary, support legal proceedings.
We reconstruct the attack timeline from logs, disks, memory and accounts, identify the entry point and assess which data was exposed.
// When to hire
When it makes sense
- After an incident, to understand how the attack happened and prevent it from repeating.
- When evidence is needed for lawsuits, labor claims or matters with insurers.
- In suspicion of fraud, leak by an employee or unauthorized access.
// How we do it
From first contact to delivery
A predictable flow, under NDA, with the client informed at every step.
02
Collection and preservation
Collection of the evidence with its integrity preserved, so it can be used later.
03
Analysis
Reconstruction of the timeline, identification of the entry vector, of the first compromised system and of the affected data.
04
Expert report
Technical report with the evidence, the methodology and the conclusions, in language that legal counsel and the board understand.
// Deliverables
What you get
- Forensic report with evidence and timeline.
- Assessment of exposed data, to support decisions on the LGPD.
- Recommendations to prevent the attack from repeating.
Every engagement starts with a bilateral NDA. We do not disclose client names, vulnerabilities or incidents without written authorization, and sensitive communication uses encrypted channels (Signal and PGP).
// Related services
You may also like
Incident Management
When the attack happens, we move fast: containment, eradication, recovery and a full forensic report of the incident.
See the serviceMalware Reverse Engineering
We analyze and reverse engineer malware to identify the origin of the attack, the behavior of the malicious code and the indicators of compromise.
See the serviceDark Web Monitoring
We continuously check whether data of your company or your social accounts is exposed on the dark web: credentials, documents and sensitive information.
See the service