Suspected data exfiltration
Did (former) employees take customer data, plans or know-how? We reconstruct access, copying and disclosure.
Service 02
What happened digitally — provably reconstructed.
Evidence acquisition to court-admissible standards: mobile devices, servers, cloud and crypto wallets. From initial analysis to the written expert report — including chain of custody according to ISO 27037.
The first hours decide whether traces will count later.
Digital evidence is volatile: logs get overwritten, messages deleted, devices reinstalled. We secure data so that its integrity can be proven at any time — with hash values, complete documentation and chain of custody according to ISO 27037.
During an ongoing attack we combine forensics with incident response: we help contain the damage without destroying the traces that insurers, authorities or courts will need later.
Typical engagements
When you need us.
Phones, laptops and cloud for proceedings
Forensic acquisition including metadata and, where technically possible, deleted content — such as chat histories or location data.
Ransomware or hacking incident
Containment, root-cause analysis and documentation: how did the attackers get in, what did they see, what is still open?
Crypto transactions
Tracing payment flows across wallets and exchanges — as a basis for criminal complaints, asset freezing or civil proceedings.
Scope
What we actually do.
- Mobile forensics for iOS and Android
- Computer and server forensics
- Cloud and email forensics
- Incident response for cyberattacks
- Crypto forensics and wallet analysis
- OSINT research on individuals and networks
Process
How we work.
-
First contact
For acute incidents, mark your request as urgent. In the first conversation we clarify what to do and what not to do.
-
Acquisition
Forensic images, SHA-256 hash values and chain of custody according to ISO 27037.
-
Analysis
Reconstruction of communication, access, timelines and payment flows.
-
Report
Findings or expert report — understandable for courts, management and insurers.
From practice
A glimpse of our work.
Anonymised in agreement with our clients. Details are shared on request and under confidentiality.
Mobile forensics in a complex employment dispute
Evidence acquisition from three mobile devices under strict chain of custody. SHA-256 hashing of all images, WhatsApp export including metadata and deleted messages, GPS track reconstruction. Court-admissible expert report with witness-testimony preparation.
Details on request
Cross-border forensics: embezzlement uncovered in a group structure
Forensic analysis across seven sites in five jurisdictions: preservation and correlation of accounting systems, email archives and mobile devices. Reconstruction of the payment flow, coordination with international law firms and national prosecutors — documented to court-admissible standard.
Details on request
Your contacts
Who handles your case.
Partner · Authorised signatory
Shariq Reza, MSc
- Digital forensics & custom software
- ORF cybercrime expert
Digital Forensics · OSINT
Marina Robak, MBA
- Mobile & cloud forensics
- Open-source intelligence
Let’s talk about your case.
The initial consultation takes about 30 minutes and is free and confidential. For acute incidents, please mark your request as urgent.