Data Forensics
Digital Forensics is undertaken after an Information security breach has occurred; it refers to the rapid systematic and thorough approach used to find evidence and gather material for the support of criminal and civil actions contained within an organization’s network. DigitalDefence’s forensics specialists are trained to respond to computer attacks. Equally important, they have the experience to conduct their investigations discretely, minimizing all impacts on our clients.
DigitalDefence is prepared to guide your organization through all stages of a case involving electronic data, from responding to the initial incident to your eventual success in arbitration or court.
Our success is based on a variety of factors, including:
- Experience of our investigators – Each DigitalDefence investigator has 15 years or more of real-life experience gained in enterprise, the military or law enforcement
- Legal experience – Our investigators have presented in court and at arbitration hearings; they understand the legal process, and how their findings play a part in the outcome
- Strong practices – We approach every case as if it will be going to court, and will be subject to intense scrutiny. Our practices support this perspective, ensuring that we are fully prepared to represent and defend our findings
DigitalDefence offers the following services:
- Pro-Active forensics – There are certain risky events (terminating an employee with just cause or suspicion of theft of intellectual property, for example) that could place an employer at risk for litigation from an employee. DigitalDefence can acquire copies of employee data prior to the event to minimize your potential liability
- Seizure of data and systems – DigitalDefence is highly skilled in collecting data to be used in formal legal proceedings (criminal, civil) and can also assist in recovering data and systems under an Anton Piller order
- Forensics analysis – DigitalDefence forensic specialists can assist you by finding and analyzing the information that may be used to support legal proceedings. This assistance can include:
- Providing expert consulting on the forensics and legal processes
- Creating exact and authenticated copies of hard drives and other electronic media
- Recovering hidden or deleted files, including password-protected or encrypted data
- Discovering attempts to conceal, delete, or fabricate electronic evidence
- Determining user activity, including online activity (websites visited, email and other online communications)
- Tracing incoming emails (fraud, threats against individuals or organizations)
- Secure asset disposal, including secure deletion of data in accordance with Canadian and international standards
- Analysis of mobile devices – DigitalDefence has developed unique and successful approaches to recovering electronic data from mobile devices, including cell phones, Blackberry devices, and hand-held computers
- Ligitation support – As court-qualified experts, DigitalDefence can help litigators to purue and win their cases by providing consulting and background knowledge, preparing declarations, and providing expert witness testimony
- Hands-On Data Forensics for Corporate Investigators
- Workshop in Malware Analysis
DigitalDefence is provides cutting edge training in digital forensics. Current course offerings include:



