Data Forensics
Can you identify the forensic evidence of employee misuse of data or fraud,
theft of intellectual property, or a security breach?
Do you possess the technical knowledge to collect electronic evidence while
maintaining acceptable chain of custody management to ensure its
acceptance in court?
Do you need support to enforce the recovery of electronic evidence, or present
it in court?
Digital forensics is the rapid systematic and thorough approach used to find electronic evidence and gather material for the support of criminal and civil actions. Digital Defence is prepared to guide your organization through all stages of a case involving electronic data, from responding to the initial incident to your eventual success in arbitration or court.
Our success is based on a variety of factors, including:
Our success is based on a variety of factors, including:
- Experience of our investigators – Each Digital Defence investigator has 15 years or more of real-life experience gained in enterprise, the military or law enforcement environments
- Legal experience – Our investigators have presented in court and at arbitration hearings; they understand the legal process, and how their findings play a part in the outcome
- Strong practices – We approach every case as if it will be going to court, and will be subject to intense scrutiny. Our practices support this perspective, ensuring that we are fully prepared to represent and defend our findings
- Industry recognition through accreditation - We hold the leading industry regulations in information security, incident response, and data forensics
Service Description
- Pro-Active forensics – There are certain risky events (terminating an employee with just cause or suspicion of theft of intellectual property, for example) that could place an employer at risk for litigation from an employee. Digital Defence can acquire copies of employee data prior to the event to minimize your potential liability
- Seizure of data and systems – Digital Defence is highly skilled in collecting data to be used in formal legal proceedings (criminal, civil) and can also assist in recovering data and systems under an Anton Piller order
- Forensics analysis – Digital Defence forensic specialists can assist you by finding and analyzing the information that may be used to support legal proceedings. This assistance can include:
- Providing expert consulting on the forensics and legal processes
- Creating exact and authenticated copies of hard drives and other electronic media
- Recovering hidden or deleted files, including password-protected or encrypted data
- Discovering attempts to conceal, delete, or fabricate electronic evidence
- Determining user activity, including online activity (websites visited, email and other online communications)
- Tracing incoming emails (fraud, threats against individuals or organizations)
- Secure asset disposal, including secure deletion of data in accordance with Canadian and international standards
- Providing expert consulting on the forensics and legal processes
- Analysis of mobile devices – Digital Defence has developed unique and successful approaches to recovering electronic data from mobile devices, including cell phones, Blackberry devices, and hand-held computers
- Litigation support – As court-qualified experts, Digital Defence can help litigators to pursue and win their cases by providing consulting and background knowledge, preparing declarations, and providing expert witness testimony
- eEvidence services
- Hands-On Data Forensics for Corporate Investigators
- Workshop in Malware Analysis

