IT FORENSICS
Incidents, networks and malware
Technical reconstruction of cyber incidents using available logs, systems and evidence.
Request an assessment
Activities to define in the assignment
- Targeted collection of authorised logs, endpoint artefacts and network data.
- Analyse indicators, suspicious files and possible compromise paths.
- Develop an incident timeline and coordinate with contacts for containment and recovery.
Reporting the findings
Incident report, relevant evidence and technical recommendations.
Conditions and limitations
Collection, containment and continuity require agreed priorities. Indicators do not automatically identify an attacker; response times must be agreed.
Specialist work is agreed only after assessing feasibility, authorisations, expertise and tools required.
Watch the guides to methods and assignments ↗IT FORENSICS / CYBER-MED
Start with the question.
Describe the context, device or source and the purpose of the analysis. We will define scope and feasibility before acting.
info@cyber-med.it ↗+39 392 389 3524
Do not attach evidence, health data or confidential documents to the initial enquiry. Transfer arrangements will be agreed afterwards.