IT FORENSICS
Data recovery for forensic purposes
Assessment of recovery possibilities with attention to media preservation and documentation.
Request an assessment
Activities to define in the assignment
- Assess media condition, encryption and operations already performed.
- Define a technically feasible acquisition and recovery process.
- Analyse recoverable data and distinguish complete, partial and unavailable items.
Reporting the findings
Actually recovered data and a report on activities and limitations.
Conditions and limitations
Damage, encryption and overwriting may make recovery partial or impossible. Unlocking, recovery and completeness are not guaranteed.
Specialist work is agreed only after assessing feasibility, authorisations, expertise and tools required.
Watch the guides to methods and assignments ↗IT FORENSICS / CYBER-MED
Start with the question.
Describe the context, device or source and the purpose of the analysis. We will define scope and feasibility before acting.
info@cyber-med.it ↗+39 392 389 3524
Do not attach evidence, health data or confidential documents to the initial enquiry. Transfer arrangements will be agreed afterwards.