Forensic investigation and support
“For the times you need support after an incident occurs.”
Following an information security incident, it is important to conduct a postmortem investigation to help inform future business processes and to decide actions to mitigate against future incidents.
EMMAN Information Security specialists can work with you in a number of different capacities to help with forensic investigation and support.
We can provide detailed forensic analysis of a compromised computer and a report documenting the incident with evidence found. This will typically take the form of an incident timeline describing the incident as it occurred.
ESISS (EMMAN Shared Information Security Service) professionals can perform forensic investigations on Microsoft Windows, Apple Mac OS X, Linux and Unix Operating Systems as well as a limited number of smart phones.
It may be useful to have an information security specialist as part of the postmortem investigation process within the organisation. An EMMAN Information Security specialist can provide a detailed knowledge of the current landscape and assist in placing new policies and procedures within your business processes. Previously the service has provided assistance to specific research projects where new technologies are trialed over the Internet, explaining in detail what went wrong and how risks can be mitigated in the future.
Other work has focused on website defacements to demonstrate the extent of a compromise and advise on concrete methods to prevent attacks in the future.
Cost start from £1,000 + VAT, but are dependent upon the resource required to undertake the scope of work.