Digital data and incident investigation and analysis
Forensics refers to the examination and analysis of electromagnetic records for evidence and investigation. It is the collection and analysis of data that remains on digital terminals to clarify the evidence needed in the event of an attack, for example. In fact, most incidents in information security are internal crimes. Many occur due to information leaks from internal servers or network devices.
When an incident occurs, we use forensic investigation to diagnose internal servers and networks to investigate whether information has been taken from both internal and external sources and whether unauthorized access has occurred, thereby obtaining evidence of the crime.
We conduct preliminary interviews to determine the subject of the investigation, the items to be investigated, the deadline, etc., and back up the data. We then proceed with the investigation, recovering data and traces of e-mails, documents, etc. We then prepare a report and assist in the preparation of documents to be submitted to the court.
