We offer a range of forensic investigation services designed to help clients uncover the complete story behind system breaches and gather evidence that may be used in court against perpetrators.

Breach investigations include searching log files to determine whether a compromise originated through a web interface and searching for rootkits (i.e. software that attackers install on servers to hide their presence and retain their point of entry). Investigations may reveal evidence of malicious activity, accidental breaches or technical failures. A common example is a poorly configured firewall that allows administrative access to a server.

Ceptera consultants have experience gathering evidence from compromised systems. We also can advise clients how best to prevent a security breach turning into a reputational disaster.