Home | Offerings | DFIR Services | Digital Forensics

Digital Forensics

Properly Analyze and Document a Variety of Incidents

Leverage VerSprite’s extensive experience in digital forensics to properly analyze and document a variety of incidents, including intellectual property theft, email compromise, data recovery due to destruction or accidental deletion of files, malware/ransomware recovery, and beyond. Contact us for a customized, strategic approach or retainer options. Our services include analysis of the following environments:

Operating Systems

Microsoft Windows Server & Desktop

Apple

Mac OS

Linux Servers, Desktops & Mobile Devices

Linux distributions including RedHat & Ubuntu and their derivatives

Cloud Environments

Amazon Web Services (AWS)
Google Cloud
Microsoft Azure

Technical Services

Network Monitoring and Analysis
Malware Analysis
Ransomware Recovery
Insider Threat Analysis
IoT Forensics

Forensic Image Creation

Forensic duplication (physical or logical images) of mechanical and solid state hard drives.
VerSprite uses industry standard hardware or software methods for duplicating media. Image types include:
- Media to media
- RAW
- EnCase format e01
- Media to file (in any number of formats)

Log Collection, Review and Analysis

Infrastructure logs
Network router and switch logs
Web proxies
Active Directory Logs
Directory Services Logs

Email Forensics

Analysis of phishing attacks
Identification of sensitive information that may have been compromised

Memory/RAM Capture & Analysis

Physical & virtual system
Process reconstruction
Network connection reconstruction

Reporting

Actionable reports that contain a comprehensive remediation plan created with your business goals in mind
Timeline creation
Expert witness testimony

6 Ways to Strengthen Security Posture

Ebook

This guide offers a perspective gained from research and experience into incidents and their causes. Nothing will stop all cyber incidents, but attention to these areas can reduce the chances of a successful attack.

Read more

Digging up the Past: OS X File Versioning

Case Study

In this case study of OS X digital forensics, we were tasked to recover the version history of documents created using Apple’s TextEdit application. It began with a request for us to recover the version history of documents created using Apple’s TextEdit application.

Read more

Preparing Your Microsoft Office 365 Environment for Forensic Analysis

Email Forensics

Malware Protection & Detection

Microsoft’s Office 365 adoption continues among larger enterprises with small and medium size businesses adopting at lower rates. It is important to know that auditing may not be enabled currently in your Microsoft Office 365 environment you manage. Download the step-by-step guide to enabling auditing.

Read more

How to Prepare for a Security Breach Announcement

Blog Post

Cybersecurity breaches have become more common as businesses grow their collections of data. While some breaches are remembered for the number of records lost, others may be remembered not only for their size but also for the way the breaches were managed.

Read more

Statistical Methods for Triaging

Presentation

Statistical Findings & Security Metrics

The volume of content available in some investigations can be overwhelming to the point that investigations are slowed and the size of the backlog increases. Learn how to accelerate the investigative process through the use of statistical sampling method.

Read more

Threat Hunting: What’s on Your Network?

Presentation

Organizational Policy

VerSprite’s Managing Consultant for DFIR provides an adaptive, heuristic approach that has been successfully used to identify compromised assets, rogue accounts, unauthorized software, organizational policy violations and poor security practices.

Read more

Evolving with Cybercriminals: How to Respond to Social Engineering Techniques

Ebook

Social Engineering

As cybercriminals evolve their tactics in social engineering, we too must evolve our procedures in response and prevention. Learn more about social engineering trends and discover how to protect your organization against cybercriminals.

Read more

Be Ready for Incident Response When GDPR Requires Action

Blog Post

Enterprise Data Security

When an organization suffers a security incident that falls within the scope of the GDPR, a response may be required. How the organization will need to respond depends on the magnitude of the incident.

Read more

Messaging for a Security Breach Announcement

Presentation

Data Security Breach

A security breach is becoming more common, but many organizations are challenged when it’s time to make the security breach announcement plan. Review steps that may be taken before the breach to streamline the announcement and notification process.

Read more

We are an international squad of professionals working as one.

Email

[email protected]

logos