Digital Forensics and Incident Response Support

01 / Purpose

What this service solves

DFIR support qualification for evidence sources, affected systems, containment state and legal constraints.

Outcomes

Scope evidence-led support for an incident.

The engagement brief establishes deliverables, responsibilities and acceptance criteria for your scope.

02 / Scope

Build around your environment.

Share affected systems, timeline, evidence sources, current containment status and legal or privacy constraints.

Capabilities in scope

Scope is tailored to the following areas:

• Affected systems or accounts
• Known incident timeline
• Available evidence sources
• Containment started

Relevant technologies & environments

• Which systems and accounts may be affected?
• What evidence sources are available?
• Has containment started?

03 / Delivery

A clear path to engagement.

1. Share your context

   Describe your objectives, systems and current controls.

2. Agree the boundaries

   Review technical scope, authorization, access and delivery constraints.

3. Confirm the engagement

   Agree responsibilities, timing and expected outputs before work begins.