Understand what happened during a security incident
Find out what actually happened during an incident
Digital forensic analysis can help investigate a cyber incident, assess its extent and identify relevant digital traces.
VIAVIS includes forensic analysis in its incident response offering.
Scope depends on the incident
The conclusions that can be reached depend on the type of incident, preserved data, logs and other available evidence. The scope must therefore be agreed case by case.
Security with measurable value
Digital traces
Analyse the technical evidence available.
Incident timeline
Reconstruct relevant events and their context where possible.
Extent of compromise
Help identify affected systems and accounts.
Corrective actions
Use findings to inform improvements in security.
Common questions
Can the exact cause always be identified?
No. Analytical possibilities depend on the data, logs and traces that have been preserved.
Is digital forensics part of incident response?
It can be one of the follow-up activities depending on the incident.
Should evidence be preserved as soon as possible after an incident?
When a serious incident is suspected, proceed carefully to avoid unnecessary loss of relevant evidence.