I provide digital forensics investigation services to help you understand what happened on a system, network, or device. Whether you're dealing with a suspected incident, need evidence for an internal review, or want a clear timeline reconstructed from digital artifacts.
What I offer:
- Disk imaging and file system analysis
- Network traffic analysis and packet capture review
- USB and removable media investigation
- Log correlation and timeline reconstruction
- Windows Active Directory and authentication log review
- Clear, evidence-based reports suitable for internal or legal review
I'm trained in digital forensics methodology, with hands-on experience conducting full investigations involving disk, network, and device evidence. I focus on producing findings that are well-documented, defensible, and easy for non-technical stakeholders to follow.
All investigations are conducted with proper authorization and in accordance with chain-of-custody practices. I'm happy to start with a smaller-scope review to demonstrate quality before larger engagements.