Digital Forensics Examinations
GlobalSecurityIQ maintains a highly mature and experienced digital forensics practice. We offer forensically sound and legally defensible data preservation, data collection, data recovery, data processing, forensic analysis, incident and breach response, and expert testimony services in support of e-Discovery, administrative investigations, and incident response.
GlobalSecurityIQ Computer Forensics Laboratory
The GlobalSecurityIQ Computer Forensics Laboratory (GCFL) is a privatized state-of-the-art digital forensics laboratory staffed with highly competent, experienced, and certified forensic examiners located in Buffalo, New York. Designed with integrity and legal defensibility in mind, the GCFL has strict processes and procedures in place to adhere to the rules of evidence and maintains chains of custody on all devices. The GCFL contains high tech professional equipment capable of extracting and presenting data from mobile devices, cloud applications, workstations, laptops, servers, and other devices.
e-Discovery Collection Services
For physical devices, GlobalSecurityIQ can provide forensically sound physical or logical images (exact copies), of laptops and desktop computers, external storage devices, and mobile devices.
Images are available in the following formats: .Ex01, .Lx01, .E01, .L01, .SMART, .AFF, RAW (.dd).
All images include cryptographic hashes of both the original media and the image, verifying they are identical copies and the acquisition was performed in a forensically sound and legally defensible manner.
GlobalSecurityIQ can identify, extract, and provide documents, files, folders, internet history, and other relevant artifacts from devices based on your scoping criteria (e.g., “all files created between 2016 and 2017 by Jane Doe”). All extracted files will be provided in native file formats.
Data loss happens all too frequently and, with culprits ranging from ransomware attacks to power surges, it has the potential to have a major impact on your business. GlobalSecurityIQ offers the following solutions to quickly recover:
- Data from a damaged or corrupted hard drive
- Deleted files and emails
- Recovery keys for cryptocurrency wallets