IT FORENSICS
Computers, servers and storage media
System and storage analysis to reconstruct activity relevant to a defined question.
Request an assessment
Activities to define in the assignment
- File systems, metadata, accounts, application artefacts and external devices.
- Usage timelines and correlation across events and sources.
- Targeted search for documents, copying traces and deletion activity.
Reporting the findings
Annotated timeline and report with references to examined evidence.
Conditions and limitations
Trace availability, configuration, encryption and media condition affect analysis; missing traces do not prove that an activity did not occur.
Specialist work is agreed only after assessing feasibility, authorisations, expertise and tools required.
Watch the guides to methods and assignments ↗IT FORENSICS / CYBER-MED
Start with the question.
Describe the context, device or source and the purpose of the analysis. We will define scope and feasibility before acting.
info@cyber-med.it ↗+39 392 389 3524
Do not attach evidence, health data or confidential documents to the initial enquiry. Transfer arrangements will be agreed afterwards.