Where Do Digital Traces Live,
and What Do They Look Like?
We locate the data left behind on digital devices and services, and verify whether it holds up as evidence.
Data RecoveryHow much of deleted data can be recovered?Databases, file systems, memory
Incident Response ForensicsHow did the attacker get in, and what did they leave behind?Malware analysis, attack timelines, ransomware investigation
Applications & SystemsWhat traces do new apps and systems leave behind?Messengers, browsers, operating systems, remote access
CloudHow do we acquire data that lives off the device?Cloud services, synced data
Evidence VerificationHow do we prove that analysis results can be trusted?Reliability of tools and procedures, anti-forensics detection