Frequently Asked Questions (FAQ)

IT forensics, also known as digital forensics or computer forensics, is about using investigation and analysis techniques to capture and secure evidence from a specific digital data carrier in such a way that it can be used in a legal proceeding in court. The goal of IT forensics is to conduct a structured investigation and ensure that the chain of evidence is fully documented and secured. Using this systematic and standardized procedure, it is possible to determine exactly which processes have taken place on an IT system under investigation and who was responsible for these actions.

IT forensics, digital forensics or computer forensics supports the clarification of irregularities in connection with electronic information that is available on a wide variety of digital data carriers. The securing and analysis of electronically available data can be of importance in various contexts. A non-binding discussion about your needs and concerns will help you to find out whether our services can be of use in your case. In a first step, a copy of the digital data carrier to be examined is created. This backup copy forms the basis for the creation of "back-ups". The forensic evaluation of the existing information is then performed on these "back-ups". As a result, the original information remains untouched. Special software, hardware and techniques are used for this work. The operation of these tools requires appropriate qualifications and many years of experience, which our investigators have. Depending on the scope and content of the information available, special review software (eDiscovery) is used. Depending on the objective of the investigation, the result of the evaluation is summarized in a report that meets the relevant legal requirements.

In the event of a suspicion of irregularities related to personal or organization-related electronic information, it is worth consulting an IT forensics expert as soon as possible. In cases of suspicion, Forentec is available to you at any time for a non-binding consultation, an initial assessment of your individual situation and a discussion of possible and sensible measures. By contacting us without obligation and carrying out a brief analysis, you can avoid the risk of inadvertently destroying valuable electronic evidence by accessing the IT equipment in question yourself. In the case of suspicion, the rapid consultation and assessment by an IT forensic expert forms the basis for a successful investigation result.

At Forentec, your data is stored and examined with the utmost care and under appropriate security precautions in a secure IT forensic laboratory set up specifically for this purpose. Access is granted exclusively to Forentec employees. In particularly sensitive cases, we offer customized solutions at different security levels. Our mobile IT forensics laboratory also enables us to carry out necessary forensic work directly at our customers' premises.

The duration and costs incurred for IT forensics work within the scope of a specific project depend on a variety of factors. Without a personal discussion and the clarification of certain key points, no binding information can be provided in this regard. In order to be able to prepare an individual offer with a corresponding cost estimate for a project, elements such as the amount of data, specified deadlines and the complexity of the work are particularly decisive. Our powerful tools ensure an efficient approach that minimizes work time and associated costs accordingly. Forentec's lean structure allows us to offer fair prices within a transparent pricing model. Our model guarantees the absolute independence of our consultancy and ensures maximum transparency regarding all the costs of the joint project.

Within the scope of our work, we exert as little influence as possible on your organization and day-to-day business. Forentec has a flexible team that will discuss the planning of the assignment in detail with you in advance in order to clarify your individual needs, expectations and requirements. Our flexibility also allows us to work outside normal business hours. This minimizes disruptions to your day-to-day business and prevents unnecessary attention.

The amount of digital evidence on mobile devices has grown exponentially in recent years and continues to rise. Often, the data available on different data carriers is interconnected (synchronized), so that the backup and evaluation of mobile devices has become more complex and demanding. However, Forentec is able to backup, prepare and analyze data and corresponding electronic evidence from a wide variety of data carriers such as servers, cloud storage, removable media such as USB sticks or external hard drives, GPS, vehicle multimedia systems, tablets, iPads as well as smartphones such as iPhone, Samsung Galaxy, Blackberry, Windows phones and Android phones.

Forentec offers various tools and methods to help verify whether unauthorized access to your email account has occurred. For example, depending on the specifics of your case, we may analyze information from local web browsers, event logs, and web mail records to determine if unauthorized access to personal or organizational data has occurred.

Yes. Forentec has the technical capabilities to forensically secure various data from social networking websites. Depending on the case, social media data can be secured even if the particular account is blocked from the public.