Overview
Unparalled digital forensics expertise – as and when you need it
Digital forensics (or computer forensics) is the process of gathering critical evidence in the event of a data breach and investigating whether, and to what extent, an organisation’s data was compromised.
Digital Forensics and Incident Response (DFIR) focuses on identifying, investigating and remediating cyber-attacks. When a data breach event occurs, your company only has a limited amount of time in which to gather key evidence.
Kroll and Redscan’s global team of experts have unrivalled experience of using forensic software and protocols to perform data collection and data preservation following a breach. We’ll ensure our investigation leaves your organisation in the strongest possible position and better prepared to respond to future incidents.
Services
Digital forensics services
We investigate your physical systems and personnel, gaining real answers to your questions and establishing whether data was compromised and to what extent. This enables us to uncover actionable information, leaving you better prepared to manage a future incident.
Our digital forensics services include:
- Digital forensics
- Litigation support
- Data preservation
- Data collection
- Data recovery and forensic analysis
- Expert testimony and reporting
Features
Digital forensics service features
Access the expertise and support you need to gain an accurate overview of any systems and data that have been compromised and ensure the integrity of investigations.
FAQ
Digital forensics FAQs
- What is digital forensics?
-
Digital forensics, or computer forensics, is the process of investigating cybercrime by identifying, acquiring, analysing and reporting on any type of data which is stored electronically. Digital forensics aims to develop intelligence which can be used for investigations and for possible prosecution.
- What is the digital forensics investigation process?
-
A digital forensics investigation will usually cover the following stages:
- Identification – Finding the evidence and noting its location.
- Preservation – Isolating, securing and preserving the data, to prevent any tampering with the evidence.
- Analysis – Reconstructing data and developing conclusions on the basis of the evidence.
- Reporting – Sharing findings with relevant parties.
- What is the role of digital forensics in cyber security?
-
Digital forensics enables organisations to capture important information in the event of their network being compromised and to support prosecution where appropriate. As well as allowing you to manage and mitigate the impact of an incident, digital forensics also helps to maintain the long-term integrity of your network infrastructure.
- How does digital forensics support incident response?
-
Digital Forensics and Incident Response (DFIR) focuses on identifying, investigating and remediating cyber-attacks. Digital forensics is a critical aspect of incident response because it enables the capture and analysis of vital evidence of a cyber event.
- What are the sources of evidence in digital forensics?
-
The evidence gathered in digital forensics covers many sources. As well as, most obviously, desktop and laptop computers, sources can also include mobile phones, digital cameras, hard drives, USB memory sticks and servers. They may also include web pages and RFID tags.
Discuss your requirements
Get in touchExpert support
Expert forensic analysis with an eye on the future
When a data breach event occurs, your company only has a short window of time in which to gather critical evidence. As well as helping to ensure that no digital evidence is overlooked, Kroll’s computer forensics experts can assist at any stage of a digital forensics investigation or litigation, regardless of the number or location of data sources.
We are highly experienced at supporting the most complex and sensitive investigative or litigation matters involving electronic evidence or data preservation. With the expertise to investigate cyber incidents of all types, we can deploy remote solutions quickly and/or be onsite within hours.
About Us
Why choose Kroll?
- Flexible, on-demand services
- Recognised by CREST and the PCI Council
- Global team of cyber risk experts
- >3,200 security incidents responded to every year
Get in touch
Complete the form for a prompt response from our team.
Resources