Expert analysis

Cybercrime investigations

Identifying and interpreting the artefacts that carry criminal relevance, documenting them so they hold up, and supporting your organisation in its dealings with investigating authorities.

Evidence is perishable

The most common reason an investigation goes nowhere is that logs had already rotated, systems had been rebuilt, or a machine was “cleaned” before anyone looked at it. If you suspect a criminal act, the sequence of the first few hours matters more than the sophistication of the analysis that follows.

Background
Practitioner experience in cybercrime investigation and published work on the criminal relevance of digital artefacts.
Teaching
The same material is delivered in university and professional settings.
Cooperation
Support in the relationship with investigating bodies, without substituting for them.
Contact

Tell us what you have.

Even a short description lets us say whether the evidence is likely to be recoverable.

Request form
Full name
Data processing consent
Privacy policy: prodefence.ro/en/privacy-policy/