Indesco

Digital Forensics is the process of collecting, preserving, protecting and analyzing digital evidence to understand the root cause of security incidents. Most organizations do not have the ability to properly conduct the process of collecting, preserving, protecting and analyzing digital evidence related to security incidents so they can better understand the root cause of the incident and put protective measures in place to mitigate the risk of future incidents.

Indesco’s Digital Forensics Team assists organizations by:

1. Analyzing security incident data to understand the extent of the incident, timing of the incident, who was involved with the incident, and what data may have been exposed in the incident.
2. Recommending proper steps for the restoration of systems back to normal operation.
3. Suggesting protection methods for the future to mitigate the risk of future incidents.

Indesco provides three specific service offerings to organizations of any size and in any vertical market:

• Post Breach Analysis – Indesco will assist organizations with the identification of indicators of compromise, incident timeline, extent of incident, individuals who participated in the incident, and any malware/vulnerability information that contributed to the incident.
• Employee Investigations – Indesco will assist organizations in the investigation of employees who have misused organizations assets to improperly access unauthorized data or violated the organizations acceptable use policy.
• Litigation Consulting – Indesco will assist litigation experts investigate security incidents to find the truth with no disposition to the outcome of events.

The digital forensic specialists at Indesco have experience gained in performing investigations around the world. They’ve worked for some of the top law firms and major companies as well as for smaller businesses and individuals.

By using specialised equipment and tools they can ensure that data is preserved and analysed in a way that doesn’t harm the information. This means that the collected results are admissible in a court of law if required.

Digital forensic services now cover a range of things beyond corporate and desktop computer systems. Mobile devices for example are no longer used just for communication, they’re increasingly a tool for accessing personal and business data on the move. This means that a smartphone or tablet can often be used as a means of following an individual’s activity. The device can provide evidence of messages sent, photos taken, files accessed and websites browsed at a particular time and location.

Forensic experts at Indesco are able to extract information from mobile devices and produce detailed reports. These can cover not just what information has been accessed or what calls made or texts sent, but also the location and movements of the device, with an accuracy to within a few metres. This provides valuable evidence that can be used to establish the facts of commercial disputes, family matters or criminal cases.

In large organisations network forensics may be called on to extract data from servers and hundreds of connected systems from desktop PCs to mobile devices. This can include network communications, VoIP phone systems and more. Analysing network traffic can detect unusual and unauthorised activity. Crucially, data capture can be carried out with no interruption the normal operation of the business.

Indesco also offers computer forensic expert witness services. Our computer forensic experts are highly qualified and experienced. They can prepare and present accurate, relevant expert witness reports or provide a forensic second opinion in both civil and criminal courts and other hearings.