In the last few years both the technology and legal resources have evolved to provide a way to prosecute the perpetrators of computer crime. Computer forensic evidence is required to successfully pursue and prosecute an attacker that has compromised a network.
When a computer system or network is compromised, organizations frequently scramble to replace or restore the compromised infrastructure, paying little attention to maintaining evidence. In the last few years however, both the technology and legal resources have evolved to provide a way to prosecute the perpetrators of computer crime. Computer forensic evidence is often required to successfully pursue and prosecute an attacker that has compromised a network.
Computer forensics involves the application of the scientific method to digital media in order to either substantiate or challenge the validity of the suspected event. This evidence may be used in a court of law. Intrinium staff can offer assistance to organizations in need of forensic services and have performed these services for organizations ranging from small to large in cases where no sensitive data was compromised to cases in which hundreds of thousands of records were breached.
The forensic process often involves investigating computer systems to determine whether they are or have been used for illegal or unauthorized activities. Typically, computer forensics experts investigate data storage devices like hard drives, compact disks or other solid state devices. Intrinium's computer forensics experts:
- Verify an incident has taken place
- Gather evidence and maintain the chain of custody of the evidence using tools developed specifically to maintain evidence integrity
- Investigate and analyze the evidence
- Report results
Computer forensics must be performed in a fashion that adheres to the standards of evidence that are admissible in a court of law.
Contact us today for more information about Intrinium Forensic Analysis services!