Services
Managed Services
Digital Forensics

Digital Forensics
A subset of forensic science that examines system data, user activity and other pieces of digital evidence to determine if an attack is in progress and who may be behind the activity.
Digital forensics is used in the incident response plan to collect and analyze electronic data to identify the source of a security breach or cyberattack, helping organizations recover quickly and prevent future incidents.
Digital forensics may include:
- File System Forensics: Analyzing file systems within the endpoint for signs of compromise.
- Memory Forensics: Analyzing memory for attack indicators that may not appear within the file system.
- Network Forensics: Reviewing network activity, including emailing, messaging, and web browsing, to identify an attack, understand the cybercriminal’s attack techniques and gauge the scope of the incident.
- Log Analysis: Reviewing and interpreting activity records or logs to identify suspicious activity or anomalous events.