When data breaches occur, organisations must act promptly. IT departments are usually the first point of call. However, they are typically only versed in the use of common data recovery software. These types of commercially available software are quite limited in their capabilities, do not allow for deep binary analysis and greatly risk overwriting the very deleted data you are trying to recover.
We use the forensic platforms relied on by law enforcement, including Cellebrite, with deep binary analysis that commercial recovery software does not provide. Accreditations relevant to government engagements are provided to vetted clients under NDA.
We also follow a 9-step Digital Forensic Incident Response Electronic Discovery Model (DFIR-EDM) to recover data or actionable evidence for your case. This strict methodology includes legal notices, a chain of custody and a reporting system that includes expert witness reports, affidavits and more.
Our lead examiner holds a Bachelor of Laws and a Master’s majoring in digital forensics (Australia) and has given expert evidence in Australian courts. Reports are supported by hash verification so the integrity of the evidence can be checked, and we work alongside your legal advisers. See his record