We conduct data recovery and data investigation activities from any electronic device, both in live mode and according to the most advanced techniques of capturing and preserving the digital evidence

Digital Forensics, or Computer Forensics, is the discipline that deals with the identification, preservation, analysis, and documentation of computer artifacts for the purpose of producing evidence in civil and criminal proceedings.

Computer Forensics assumes a prominent role where digital data become increasingly valuable assets as a strategic resource of any business, whether private or public. Advanced Digital Forensics techniques enable the prevention of computer crimes such as, for example, data and know-how theft, industrial espionage, abusive access to corporate computer systems, as well as damage due to viruses and intrusions. The professional figure of the forensic computer scientist is able to analyze increasingly complex digital systems and guarantees the client a high level of both technical and legal expertise. The working methodology adopted, fine-tuned over more than 15 years of activity, guarantees the integrity, accuracy and validity of the original data in accordance with international best practices in Digital Forensics that provide:

• Identification: a digital investigation begins with planning the work and identifying potential information containers. Our team, working together with the client, identifies the objectives of the analysis, acquires information related to the case, and applies specific and suitable procedures;
• Acquisition: accessing digital data without using appropriate tools and procedures can render valuable information inadmissible in court. Digital evidence is fragile by nature and can be easily altered just by turning on the device that contains it. Our process ensures that data is captured without altering or damaging it, by making a forensic copy of it, verifying its integrity through hashing functions and ensuring a proper chain of custody;
• Extraction: working on the forensic copy acquired, our team extracts the information contained in the media under analysis. Our extraction process aims at examining traces of online activity, messaging, reconstructing GPS tracks, and recovering deleted files, hidden files, temporary files, file fragments, and records;
• Analysis: the information, once extracted, is analyzed to reconstruct the activities performed with the digital device. Our experts are able to analyze data from a variety of devices: personal computers, servers, cell phones, smartphones, satellite navigators, network traffic, log files, and data on the cloud;
• Report: once the analysis phase is completed, a clear and concise written report is produced, which can be used for internal evaluations within the commissioning company or in court.