Digital Forensics
Preserve and examine digital evidence to support reliable investigation findings.
Overview
Potential evidence can be overwritten, deleted or altered before it is captured. Gaps in handling records and disconnected timestamps then make it difficult to establish who handled material or place events in a reliable sequence, particularly when affected systems need to be rebuilt or retired.
Digital Forensics addresses the identification, collection, preservation and analysis of digital artefacts. It documents handling and transfers, enables analysis without altering preserved source material, and correlates available artefacts to reconstruct relevant events. This reduces unstructured collection from live systems and findings that cannot be traced back to supporting evidence.
What this solution helps you achieve
Reliable investigation findings
Findings can be traced to preserved artefacts and the methods used to examine them.
Documented evidence handling
Evidence collection, handling and transfers have a clear documented history.
Products for this solution
Explore options for this solution. The right choice depends on your environment, requirements and existing tools. We can help you assess which products fit and where they complement one another.
