LANCOLOGNE IT-FORENSIK

Alle Forensik-Leistungen im Überblick

Professionelle IT-Forensik für Mobile Geräte und Windows-Systeme – gerichtsverwertbar, DSGVO-konform, erfahren.

136
Mobile forensics

100
Windows Forensik

MOBILE FORENSICS

Mobile forensics

136 spezialisierte Leistungen rund um Smartphones & Tablets

ADB (Android Debug Bridge) in IT forensics AirDrop artefacts Android Keystore and Security Architecture Android Verified Boot (AVB)Forensic analysis of Android app permissions Forensic analysis of Android backup artefacts Android Backups – Options and Limitations Forensic analysis of Android notifications Android-Bluetooth-Artefakte forensisch analysieren Forensic analysis of Android call logs Android-Cloud-Synchronisation forensisch analysieren Forensic analysis of Android crash dumps and tombstones Forensic analysis of Android file managers and downloads Forensic analysis of Android file system artefacts Android email forensics Android eSIM Forensics Android-Forensik – Professionelle Analyse digitaler Beweismittel auf Android-Geräten Forensic analysis of Android device logs (events and system logs)Forensic analysis of the Android calendar Forensic analysis of Android contacts Forensic analysis of Android NFC artefacts Android-SIM-Karten-Artefakte forensisch analysieren Forensic analysis of Android SMS and MMS messages Forensic analysis of Android location data Forensic analysis of Android system settings Android system logs and Logcat Android Timeline and Event Reconstruction Android Trojans, banking malware and RATs Android-USB- und OTG-Artefakte forensisch analysieren Forensic analysis of Android-WLAN artefacts Forensic analysis of Android timestamps and time zones Detecting anti-forensics on Android APFS – Apple’s file system Apple Data Protection and data protection mechanisms Apple Health (HealthKit) – IT-forensische Untersuchung Apple Maps artefacts Apple ID, synchronisation and device pairing Verification of the authenticity of digital evidence The evidential value of digital artefacts Preservation of evidence from smartphones Cellebrite in mobile forensics Cellebrite in der Mobilforensik – Professionelle Datensicherung und Analyse digitaler Beweismittel Chain of Custody for Smartphones Chatmanipulationen nachweisen Detecting chat manipulation – Objective IT forensic analysis of digital communications Custom Recovery (TWRP & Co.) aus Sicht der Android-Forensik Custom-ROMs aus Sicht der Android-Forensik The Android file system explained in simple terms The iOS file system explained in simple terms Have digital metadata professionally analysed Advanced logical extraction from a smartphone Forensic analysis of EXIF metadata in images Facebook Messenger auf Android forensisch analysieren FaceTime artefacts Fastboot and bootloader File Based Encryption (FBE) und Full Disk Encryption (FDE)Full File System (FFS) in mobile IT forensics Gegengutachten / Plausibilitätsprüfung Recovering deleted data on Android Mobile phone expert reports admissible in court Forensic analysis of Google Chrome on Android Google Fotos auf Android forensisch analysieren Forensic analysis of Google Maps on Android Google Account and Google Cloud artefacts Limitations and uncertainties in IT forensic reports Expert reports for courts and public prosecutors’ offices Expert reports for solicitors Häufige Fragen zu Kosten, Vergütung und Abrechnung iCloud forensics and Apple cloud data iMessage forensics Conduct a forensic analysis of installed apps Forensic analysis of installed apps (Android)iOS logs and system logs iPhone Backups – Options and Limitations iPhone Forensics – Admissible analysis of digital evidence on Apple devices IT-forensische Malware-Gutachten für Smartphones Forensic analysis of iTunes and Finder backups Jailbreaking in iPhone forensics Jailbreaking in iPhone forensics Costs of an IT forensic investigation Costs of an IT forensic report Logical extraction of a smartphone Malware Indicators (IoCs), MVT and YARA Checking Messenger messages for tampering Messenger forensics – Analysis of digital communications on smartphones and tablets Metadaten in der mobilen Forensik – was digitale Begleitspuren verraten können Metadata in mobile forensics Mobile artefacts – call logs in IT forensics Mobile Artefakte – App-Nutzung (App Usage) in der IT-Forensik Mobile artefacts – Notifications in IT forensics Mobile Devices – Screen Time in IT Forensics Mobile devices – Bluetooth devices in IT forensics Mobile Artefakte – Browser-Artefakte in der IT-Forensik Mobile artefacts – files in IT forensics Mobile devices – Downloads in IT forensics Mobile Artefacts – EXIF Metadata in IT Forensics Mobile artefacts – photographs in IT forensics Mobile artefacts – calendars in IT forensics Mobile Artefacts – Contacts in IT Forensics Mobile Artefacts – MMS in IT Forensics Mobile Artefacts – Notes on IT Forensics Mobile Artefakte – SMS in der IT-Forensik Mobile artefacts – location data in IT forensics Mobile Artefakte – Videos in der IT-Forensik Mobile artefacts – WLAN artefacts in IT forensics Mobile artefacts – The clipboard in IT forensics Mobile malware analysis – scanning smartphones for malware and digital anomalies Evidence of deleted data Package deals for private individuals, businesses and solicitors Physical removal of a smartphone Private report on smartphones Root in Android forensics Root in Android forensics Rooting from the perspective of Android forensics Expert reports in accordance with recognised forensic standards Safari artefacts Forensic analysis of Samsung Gallery on Android Secure Enclave – Security in the iPhone Conducting a forensic analysis of Signal Messenger on Android Signal-Forensik – Analyse verschlüsselter Kommunikation auf Smartphones Spyware auf Smartphones erkennen SQLite-Forensik – Wenn digitale Spuren in Datenbanken gespeichert werden Government-sponsored malware (e.g. Pegasus) – the scope and limitations of investigations Stalkerware on smartphones Technical documentation and reproducibility Forensic analysis of Telegram on Android Telegram Forensics – Forensic Analysis of Telegram Communications Forensic analysis of Threema on Android Vergütung nach JVEG und individuelle Preisvereinbarungen WAL- und SHM-Analyse – Unscheinbare Dateien mit großer Bedeutung für die IT-Forensik WAL and SHM analysis in IT forensics Why different tools in mobile IT forensics produce different results Forensic analysis of WhatsApp on Android WhatsApp Forensics – Analysis of chat histories and digital evidence Timeline analysis Zeitstempel und Metadaten unter Android

WINDOWS FORENSICS

Windows Forensik

100 spezialisierte Leistungen rund um Windows-Systeme

Forensic analysis of Amcache – evidence of programmes and system activity Geplante Aufgaben (Scheduled Tasks) forensisch analysieren – Automatische Abläufe nachvollziehen Forensic analysis of jump lists – Important insights into user activity Forensic analysis of LNK files – reconstructing user activities in a traceable manner Forensic Analysis of the Master File Table (MFT) – The Heart of the NTFS File System Forensic analysis of the NTFS file system – The foundation of virtually every Windows investigation Professional Windows Forensics – Securing and analysing digital evidence to stand up in court ShellBags forensisch analysieren – Ordnerzugriffe und Benutzeraktivitäten rekonstruieren Forensic analysis of ShimCache (AppCompatCache) – evidence of applications that have been run SRUM forensisch analysieren – System- und Netzwerkaktivitäten nachvollziehen Forensic analysis of the USN Journal – tracking changes on Windows systems Windows Active Directory-Artefakte forensisch analysieren – Domänenaktivitäten technisch nachvollziehen Forensic analysis of the Windows Activity Cache – reconstructing user activities Windows Antiviren- und Sicherheitssoftware forensisch analysieren – Sicherheitsereignisse technisch bewerten Forensic analysis of Windows AppCompat artefacts – tracing programme executions and compatibility Windows AppData forensisch analysieren – Anwendungs- und Benutzerdaten auswerten Forensic Analysis of Windows AppX Packages – Understanding Modern Windows Applications Forensic analysis of Windows autostart entries – identifying persistence mechanisms Forensic analysis of the Windows BCD – Understanding boot configurations Forensic Analysis of Windows User Accounts (SAM) – Evaluating Local Accounts and Security Information Forensic analysis of Windows BitLocker artefacts – understanding encryption status and system information Forensic Analysis of Windows Bluetooth Artifacts – Tracing Paired Devices and Connections Windows Clipboard History forensisch analysieren – Inhalte der Zwischenablage als digitale Beweisspur Forensic analysis of Windows COM artefacts – tracing components and system activities Forensic Analysis of Windows COM+ – Tracing Distributed Components and Services Forensic analysis of Windows crash dumps – Technical reconstruction of system crashes Windows Credential Manager forensisch analysieren – Gespeicherte Anmeldeinformationen nachvollziehen Forensic analysis of Windows Defender Antivirus artefacts – tracing security events Forensic analysis of Windows Defender Application Control (WDAC) – Understanding application policies Windows Defender-Artefakte forensisch analysieren – Sicherheitsereignisse nachvollziehen Forensic analysis of Windows Delivery Optimisation – tracing Update and transmission artefacts Windows Device Metadata Cache forensisch analysieren – Hinweise auf erkannte Hardware Forensic Analysis of Windows Services – Investigating Persistence and System Configuration Windows DNS-Cache forensisch analysieren – Netzwerkaktivitäten nachvollziehen Windows DNS-Client-Artefakte forensisch analysieren – Namensauflösungen und Netzwerkaktivitäten nachvollziehen Forensic Analysis of Windows DPAPI – Tracing Protected User Data and Keys Windows EDR-Artefakte forensisch analysieren – Sicherheitsereignisse und Angriffsketten rekonstruieren Forensic Analysis of Windows EFS – Examining Encrypted Files and Certificates Windows Error Reporting (WER) forensisch analysieren – Programmabstürze und Systemfehler nachvollziehen Forensic Analysis of Windows ETL Logs – Tracing Detailed System Events Forensic analysis of Windows event logs – evaluating system events in a traceable manner Windows Firewall-Artefakte forensisch analysieren – Netzwerkkommunikation und Konfigurationsänderungen nachvollziehen Forensic analysis of the Windows font cache – clues regarding document and programme usage Forensic analysis of Windows Group Policy – Understanding system configurations In-depth forensic analysis of Windows’ hiberfil.sys – Reconstructing saved RAM contents Windows Hosts-Datei forensisch analysieren – Manuelle Namensauflösungen nachvollziehen Forensic Analysis of Windows Hyper-V Artefacts – Understanding Virtual Infrastructures Windows Live Response Artefakte forensisch analysieren – Flüchtige Systeminformationen sichern Windows Memory Dumps forensisch analysieren – Flüchtige Daten aus dem Arbeitsspeicher auswerten Windows Microsoft Defender for Endpoint (MDE) Artefakte forensisch analysieren – Sicherheitsereignisse nachvollziehen Forensic analysis of Windows Microsoft Store artefacts – Tracing installed apps and updates Windows MountPoints2-Artefakte forensisch analysieren – Hinweise auf angeschlossene Datenträger Forensic Analysis of Windows MSIX Packages – Understanding Modern Application Installations Forensic analysis of Windows Nearby Sharing – Reconstructing local file transfers Forensic analysis of Windows network adapters – understanding network interfaces and system configuration Forensic analysis of Windows network profiles – tracing network connections and configurations Forensic analysis of the Windows Notification Database – notifications as digital evidence Forensic Analysis of Windows Offline Files (CSC) – Analysing Cached Network Files Windows OneDrive-Artefakte forensisch analysieren – Lokale Cloud-Spuren technisch bewerten Windows pagefile.sys vertieft forensisch analysieren – Ausgelagerte Speicherinhalte rekonstruieren Windows Papierkorb ($Recycle.Bin) vertieft forensisch analysieren – Löschvorgänge nachvollziehen Forensic analysis of the Windows Recycle Bin – Tracing deleted files Windows Performance Monitor und Performance Logs forensisch analysieren – Systemzustände nachvollziehen Windows Portable Devices (WPD) forensisch analysieren – Mobile Geräte als digitale Spur Forensic Analysis of Windows PowerShell Artifacts – Tracing Commands and Activities Forensic analysis of Windows Prefetch files – identifying evidence of programme execution Forensic analysis of the Windows Print Spooler – Technical investigation of print jobs Forensic analysis of Windows proxy artefacts – Understanding proxy configurations and network communication Forensic analysis of Windows RAM dumps – Securing ephemeral evidence from main memory Windows RDP-Artefakte forensisch analysieren – Remote-Desktop-Verbindungen nachvollziehen Forensic analysis of Windows ReadyBoot and ReadyBoost artefacts – tracing boot processes and system usage Forensic Analysis of the Windows Registry – One of the most important sources of information in Windows forensics Forensic analysis of Windows Registry transaction logs – tracing changes to the Registry Windows Reliability Monitor forensisch analysieren – Systemänderungen und Fehler chronologisch nachvollziehen Forensic Analysis of Windows Sandbox Artifacts – Tracing Temporary Execution Environments Forensic analysis of the Windows Search database – Tracing indexed files and search information Windows Search Index forensisch analysieren – Indizierte Daten und Dateiverweise nachvollziehen Forensic analysis of the Windows SECURITY hive – understanding security configurations Forensic analysis of Windows Setup API logs – tracing device installations Windows Sicherheitsrichtlinien forensisch analysieren – Sicherheitskonfigurationen nachvollziehen Forensic Analysis of Windows SMB Artifacts – Tracing Network Shares and File Accesses Windows SOFTWARE-Hive forensisch analysieren – Software- und Systemkonfigurationen rekonstruieren Forensic analysis of the Windows swapfile.sys – Evaluating additional memory artefacts Forensic analysis of Windows synchronisation artefacts – tracing synchronisation processes Forensic analysis of Windows Sysmon artefacts – tracing processes, network connections and system events Windows SYSTEM-Hive forensisch analysieren – Systemkonfigurationen und Hardwareinformationen rekonstruieren Forensic analysis of Windows TCP/IP configuration – Understanding network settings Windows Temp-Dateien forensisch analysieren – Temporäre Artefakte als digitale Beweismittel Windows Thumbnail Cache forensisch analysieren – Vorschaubilder als digitale Spur Windows Timeline forensisch analysieren – Benutzeraktivitäten chronologisch nachvollziehen Forensic analysis of Windows Update artefacts – tracing installations and system changes Forensic analysis of Windows USB artefacts – Tracing connected devices Windows Volume Shadow Copies forensisch analysieren – Frühere Dateistände und Systeminformationen nachvollziehen Forensic analysis of Windows VPN artefacts – tracing VPN connections and configurations Windows WLAN-Artefakte forensisch analysieren – Drahtlose Netzwerkverbindungen nachvollziehen Windows WMI forensisch analysieren – Persistenzmechanismen und Systemaktivitäten nachvollziehen Windows Zertifikatsspeicher forensisch analysieren – Digitale Zertifikate und Vertrauensstellungen nachvollziehen Windows-Auslagerungsdatei (pagefile.sys) forensisch analysieren Windows-Benutzerprofile forensisch analysieren – Benutzeraktivitäten nachvollziehen Forensic analysis of the Windows hibernation file (hiberfil.sys)

Enquire now – free initial consultation

Sie wissen nicht welche Forensik-Leistung Sie benötigen? Wir beraten Sie kostenlos und unverbindlich.