Forensic services

When data is evidence, what you recover matters less than how. We work with a closed chain of custody and record every step.

Method

Write blockers on every acquisition
Hash values before and after, recorded in the report
Chain of custody with date, time and responsible party per action
Sealed storage between steps

What we do

Acquisition of damaged or encrypted media, recovery of deleted files, timeline analysis, and recovery from devices that no longer start.

Discretion

Cases in this category are handled by a limited group of staff, in a separate room, with dedicated storage. Nothing is recorded in the ordinary case system.

We have experience as a court-appointed expert and work for police services and law firms among others.