Equipment and servers
Analysis of artifacts and activity on authorized sources.
TRUSTNET SECURITY / Digital forensic analysis
Reconstruct the facts.
Preserve the evidence.
Technical research to understand what happened, what assets are involved and what information backs the conclusions.
Records and identities
Correlation of events, accesses and timelines.
Technical report
Conclusions, limitations and sustained recommendations.
EVIDENCE · CONTEXT · TRAZABILITY
Each evidence
It needs context.
We apply a documented process of compilation, review and analysis. We protect the integrity of the information and record its treatment during the service.
Illustrative Path of Evidence
01
Source identified
Equipment, record or file authorized.
02
Documented integrity
Identification and registration of the treatment.
03
Reconstructed context
Events related to a timeline.
04
Sustained conclusion
Findings and limitations of the analysis.
RESULTS THAT YOU CAN USE
More clarity.
A next concrete step.
- Inventory of analysed sources
- Recording of the handling of evidence
- Relevant Event Timeline
- Technical report and recommendations
HOW WE WORK
A shared tour.
- 01
Preservation
Identify sources and agree on collection.
- 02
Examine
Check the artifacts and validate their integrity.
- 03
Related
Build a timeline with relevant events.
- 04
Explain
Delivering conclusions and limits of the investigation.
We're backing up your DUDs.
Before we begin.
Investment as far as possible. We count on your assets, objectives and needs.
Should we turn off or reinstall the equipment?
Before making changes, ask for guidance to preserve the sources of evidence. The performance depends on the incident and the environment.
File recovery is guaranteed?
No. The availability of data and evidence depends on their status, retention, encryption and previous changes.
Does the report substitute legal advice?
No. The scope is technical. If the case requires legal proceedings, it must be coordinated with the corresponding advisers and authorities.
