InfoSec Advisors can serve as an independent, neutral forensics and data recovery provider for clients and their legal advisors.  Evidentiary information that may be used in civil or criminal legal proceedings can be recovered and collected using methods, tools and procedures that adhere to chain of custody requirements. This service may be employed for any of the following scenarios:

• Collecting information from computers belonging to defendants or litigants in criminal or civil cases.
• Recovering data after a hardware or software failure.
• Investigating a security breach to determine how an attacker gained
  access in addition to what networks, systems, applications and data were accessed or impacted.
• Gathering evidence to support employee or contractor termination or legal recourse following termination.
• Network or Systems performance optimization.

Engagement Objectives:

• Retrieve evidentiary information from a certified identical copy of its original source.
• Preserve the source of the information in its original state to insure the integrity of the data and secure it
  from tampering or alteration.
• Maintain a clear, documented “chain of custody” of the information from its original
  seizure, through the duplication, analysis and investigation.
• Present methodology, tools, findings and analyses of the evidence to assist with the legal case.

Benefits:

• A reproduction of evidentiary information guaranteed to be in its original state.
• Preservation of the original source of the information.
• A clear “chain of custody” that documents everything that has been done with the information.
• A clear “chain of custody” is maintained to ensure that the evidence has not been altered or tampered with and has been properly managed since seizure of the original source.

Most Frequently Asked Question

How do I engage InfoSec Advisors to help me with a data recovery or forensics investigation? 

When you contact us about computer forensics and data recovery, one of our security consultants will meet with you to identify and understand your requirements and assess feasibility and likelihood of success. We will draft a statement of work that accurately describes the work to be done. It will include an approximate schedule and the cost for performing the work. Our consultant will review the statement of work with you to confirm that it accurately describes the work to be done. After it is signed by both parties, the work is scheduled.