LANCOLOGNE IT-FORENSIK

Alle Forensik-Leistungen im Überblick

Professionelle IT-Forensik für Mobile Geräte und Windows-Systeme – gerichtsverwertbar, DSGVO-konform, erfahren.

136
Mobile forensics

100
Windows Forensik

MOBILE FORENSICS

Mobile forensics

136 spezialisierte Leistungen rund um Smartphones & Tablets

ADB (Android Debug Bridge) in IT forensics AirDrop artefacts Android Keystore and Security Architecture Android Verified Boot (AVB)Forensic analysis of Android app permissions Forensic analysis of Android backup artefacts Android Backups – Options and Limitations Forensic analysis of Android notifications Forensic analysis of Android Bluetooth artefacts Forensic analysis of Android call logs Forensic analysis of Android cloud synchronisation Forensic analysis of Android crash dumps and tombstones Forensic analysis of Android file managers and downloads Forensic analysis of Android file system artefacts Android email forensics Android eSIM Forensics Android Forensics – Professional analysis of digital evidence on Android devices Forensic analysis of Android device logs (events and system logs)Forensic analysis of the Android calendar Forensic analysis of Android contacts Forensic analysis of Android NFC artefacts Android-SIM-Karten-Artefakte forensisch analysieren Forensic analysis of Android SMS and MMS messages Forensic analysis of Android location data Forensic analysis of Android system settings Android system logs and Logcat Android Timeline and Event Reconstruction Android Trojans, banking malware and RATs Android-USB- und OTG-Artefakte forensisch analysieren Forensic analysis of Android-WLAN artefacts Forensic analysis of Android timestamps and time zones Detecting anti-forensics on Android APFS – Apple’s file system Apple Data Protection and data protection mechanisms Apple Health (HealthKit) – IT forensic investigation Apple Maps artefacts Apple ID, synchronisation and device pairing Verification of the authenticity of digital evidence The evidential value of digital artefacts Preservation of evidence from smartphones Cellebrite in mobile forensics Cellebrite in der Mobilforensik – Professionelle Datensicherung und Analyse digitaler Beweismittel Chain of Custody for Smartphones Proving chat manipulation Detecting chat manipulation – Objective IT forensic analysis of digital communications Custom Recovery (TWRP & Co.) aus Sicht der Android-Forensik Custom-ROMs aus Sicht der Android-Forensik The Android file system explained in simple terms The iOS file system explained in simple terms Have digital metadata professionally analysed Advanced logical extraction from a smartphone Forensic analysis of EXIF metadata in images Forensic analysis of Facebook Messenger on Android FaceTime artefacts Fastboot and bootloader File-Based Encryption (FBE) and Full Disk Encryption (FDE)Full File System (FFS) in mobile IT forensics Counter-assessment / Plausibility check Recovering deleted data on Android Mobile phone expert reports admissible in court Forensic analysis of Google Chrome on Android Forensic analysis of Google Photos on Android Forensic analysis of Google Maps on Android Google Account and Google Cloud artefacts Limitations and uncertainties in IT forensic reports Expert reports for courts and public prosecutors’ offices Expert reports for solicitors Frequently asked questions about costs, remuneration and invoicing iCloud forensics and Apple cloud data iMessage forensics Conduct a forensic analysis of installed apps Forensic analysis of installed apps (Android)iOS logs and system logs iPhone Backups – Options and Limitations iPhone Forensics – Admissible analysis of digital evidence on Apple devices IT-forensische Malware-Gutachten für Smartphones Forensic analysis of iTunes and Finder backups Jailbreaking in iPhone forensics Jailbreaking in iPhone forensics Costs of an IT forensic investigation Costs of an IT forensic report Logical extraction of a smartphone Malware Indicators (IoCs), MVT and YARA Checking Messenger messages for tampering Messenger forensics – Analysis of digital communications on smartphones and tablets Metadaten in der mobilen Forensik – was digitale Begleitspuren verraten können Metadata in mobile forensics Mobile artefacts – call logs in IT forensics Mobile artefacts – App usage in IT forensics Mobile artefacts – Notifications in IT forensics Mobile Devices – Screen Time in IT Forensics Mobile devices – Bluetooth devices in IT forensics Mobile artefacts – browser artefacts in IT forensics Mobile artefacts – files in IT forensics Mobile devices – Downloads in IT forensics Mobile Artefacts – EXIF Metadata in IT Forensics Mobile artefacts – photographs in IT forensics Mobile artefacts – calendars in IT forensics Mobile Artefacts – Contacts in IT Forensics Mobile Artefacts – MMS in IT Forensics Mobile Artefacts – Notes on IT Forensics Mobile Artefakte – SMS in der IT-Forensik Mobile artefacts – location data in IT forensics Mobile Artefakte – Videos in der IT-Forensik Mobile artefacts – WLAN artefacts in IT forensics Mobile artefacts – The clipboard in IT forensics Mobile malware analysis – scanning smartphones for malware and digital anomalies Evidence of deleted data Package deals for private individuals, businesses and solicitors Physical removal of a smartphone Private report on smartphones Root in Android forensics Root in Android forensics Rooting from the perspective of Android forensics Expert reports in accordance with recognised forensic standards Safari artefacts Forensic analysis of Samsung Gallery on Android Secure Enclave – Security in the iPhone Conducting a forensic analysis of Signal Messenger on Android Signal-Forensik – Analyse verschlüsselter Kommunikation auf Smartphones Detecting spyware on smartphones SQLite Forensics – When digital traces are stored in databases Government-sponsored malware (e.g. Pegasus) – the scope and limitations of investigations Stalkerware on smartphones Technical documentation and reproducibility Forensic analysis of Telegram on Android Telegram Forensics – Forensic Analysis of Telegram Communications Forensic analysis of Threema on Android Fees in accordance with the JVEG and individual fee agreements WAL and SHM Analysis – Unassuming files of great significance to IT forensics WAL and SHM analysis in IT forensics Why different tools in mobile IT forensics produce different results Forensic analysis of WhatsApp on Android WhatsApp Forensics – Analysis of chat histories and digital evidence Timeline analysis Timestamps and metadata on Android

WINDOWS FORENSICS

Windows Forensik

100 spezialisierte Leistungen rund um Windows-Systeme

Forensic analysis of Amcache – evidence of programmes and system activity Forensic analysis of scheduled tasks – Tracing automated processes Forensic analysis of jump lists – Important insights into user activity Forensic analysis of LNK files – reconstructing user activities in a traceable manner Forensic Analysis of the Master File Table (MFT) – The Heart of the NTFS File System Forensic analysis of the NTFS file system – The foundation of virtually every Windows investigation Professional Windows Forensics – Securing and analysing digital evidence to stand up in court Forensic analysis of ShellBags – reconstructing folder access and user activity Forensic analysis of ShimCache (AppCompatCache) – evidence of applications that have been run Forensic analysis of SRUM – Tracking system and network activity Forensic analysis of the USN Journal – tracking changes on Windows systems Forensic analysis of Windows Active Directory artefacts – Technical investigation of domain activity Forensic analysis of the Windows Activity Cache – reconstructing user activities Forensic analysis of Windows antivirus and security software – technical assessment of security incidents Forensic analysis of Windows AppCompat artefacts – tracing programme executions and compatibility Forensic analysis of Windows AppData – analysing application and user data Forensic Analysis of Windows AppX Packages – Understanding Modern Windows Applications Forensic analysis of Windows autostart entries – identifying persistence mechanisms Forensic analysis of the Windows BCD – Understanding boot configurations Forensic Analysis of Windows User Accounts (SAM) – Evaluating Local Accounts and Security Information Forensic analysis of Windows BitLocker artefacts – understanding encryption status and system information Forensic Analysis of Windows Bluetooth Artifacts – Tracing Paired Devices and Connections Forensic analysis of the Windows clipboard history – clipboard contents as a digital trail of evidence Forensic analysis of Windows COM artefacts – tracing components and system activities Forensic Analysis of Windows COM+ – Tracing Distributed Components and Services Forensic analysis of Windows crash dumps – Technical reconstruction of system crashes Forensic analysis of Windows Credential Manager – Tracing stored login credentials Forensic analysis of Windows Defender Antivirus artefacts – tracing security events Forensic analysis of Windows Defender Application Control (WDAC) – Understanding application policies Forensic analysis of Windows Defender artefacts – tracing security events Forensic analysis of Windows Delivery Optimisation – tracing Update and transmission artefacts Forensic analysis of the Windows Device Metadata Cache – evidence of detected hardware Forensic Analysis of Windows Services – Investigating Persistence and System Configuration Forensic analysis of the Windows DNS cache – tracing network activity Forensic analysis of Windows DNS client artefacts – tracing name resolutions and network activity Forensic Analysis of Windows DPAPI – Tracing Protected User Data and Keys Forensic analysis of Windows EDR artefacts – reconstructing security events and attack chains Forensic Analysis of Windows EFS – Examining Encrypted Files and Certificates Forensic analysis of Windows Error Reporting (WER) – investigating programme crashes and system errors Forensic Analysis of Windows ETL Logs – Tracing Detailed System Events Forensic analysis of Windows event logs – evaluating system events in a traceable manner Forensic analysis of Windows Firewall artefacts – tracing network communication and configuration changes Forensic analysis of the Windows font cache – clues regarding document and programme usage Forensic analysis of Windows Group Policy – Understanding system configurations In-depth forensic analysis of Windows’ hiberfil.sys – Reconstructing saved RAM contents Forensic analysis of the Windows hosts file – Tracing manual name resolutions Forensic Analysis of Windows Hyper-V Artefacts – Understanding Virtual Infrastructures Forensic analysis of Windows Live Response artefacts – Backing up transient system information Forensic analysis of Windows memory dumps – analysing volatile data from RAM Forensic analysis of Windows Microsoft Defender for Endpoint (MDE) artefacts – tracing security events Forensic analysis of Windows Microsoft Store artefacts – Tracing installed apps and updates Forensic analysis of Windows MountPoints2 artefacts – evidence of connected storage devices Forensic Analysis of Windows MSIX Packages – Understanding Modern Application Installations Forensic analysis of Windows Nearby Sharing – Reconstructing local file transfers Forensic analysis of Windows network adapters – understanding network interfaces and system configuration Forensic analysis of Windows network profiles – tracing network connections and configurations Forensic analysis of the Windows Notification Database – notifications as digital evidence Forensic Analysis of Windows Offline Files (CSC) – Analysing Cached Network Files Forensic analysis of Windows OneDrive artefacts – Technical assessment of local cloud traces In-depth forensic analysis of the Windows pagefile.sys – Reconstructing paged-out memory contents In-depth forensic analysis of the Windows Recycle Bin ($Recycle.Bin) – tracing deletion processes Forensic analysis of the Windows Recycle Bin – Tracing deleted files Forensic analysis of Windows Performance Monitor and Performance Logs – Understanding system states Forensic Analysis of Windows Portable Devices (WPD) – Mobile Devices as Digital Evidence Forensic Analysis of Windows PowerShell Artifacts – Tracing Commands and Activities Forensic analysis of Windows Prefetch files – identifying evidence of programme execution Forensic analysis of the Windows Print Spooler – Technical investigation of print jobs Forensic analysis of Windows proxy artefacts – Understanding proxy configurations and network communication Forensic analysis of Windows RAM dumps – Securing ephemeral evidence from main memory Forensic analysis of Windows RDP artefacts – tracing Remote Desktop connections Forensic analysis of Windows ReadyBoot and ReadyBoost artefacts – tracing boot processes and system usage Forensic Analysis of the Windows Registry – One of the most important sources of information in Windows forensics Forensic analysis of Windows Registry transaction logs – tracing changes to the Registry Forensic analysis of the Windows Reliability Monitor – tracking system changes and errors chronologically Forensic Analysis of Windows Sandbox Artifacts – Tracing Temporary Execution Environments Forensic analysis of the Windows Search database – Tracing indexed files and search information Forensic analysis of the Windows Search Index – Tracing indexed data and file references Forensic analysis of the Windows SECURITY hive – understanding security configurations Forensic analysis of Windows Setup API logs – tracing device installations Forensic analysis of Windows security policies – Understanding security configurations Forensic Analysis of Windows SMB Artifacts – Tracing Network Shares and File Accesses Forensic analysis of the Windows SOFTWARE hive – reconstructing software and system configurations Forensic analysis of the Windows swapfile.sys – Evaluating additional memory artefacts Forensic analysis of Windows synchronisation artefacts – tracing synchronisation processes Forensic analysis of Windows Sysmon artefacts – tracing processes, network connections and system events Forensic analysis of the Windows SYSTEM hive – reconstructing system configurations and hardware information Forensic analysis of Windows TCP/IP configuration – Understanding network settings Forensic analysis of Windows temporary files – Temporary artefacts as digital evidence Forensic analysis of the Windows thumbnail cache – thumbnails as digital evidence Forensic analysis of Windows Timeline – tracing user activities chronologically Forensic analysis of Windows Update artefacts – tracing installations and system changes Forensic analysis of Windows USB artefacts – Tracing connected devices Forensic analysis of Windows Volume Shadow Copies – Tracing previous file states and system information Forensic analysis of Windows VPN artefacts – tracing VPN connections and configurations Forensic analysis of Windows WLAN artefacts – Tracing wireless network connections Forensic analysis of Windows WMI – Understanding persistence mechanisms and system activities Forensic analysis of the Windows certificate store – Tracing digital certificates and trust relationships Forensic analysis of the Windows page file (pagefile.sys)Forensic analysis of Windows user profiles – tracing user activities Forensic analysis of the Windows hibernation file (hiberfil.sys)

Enquire now – free initial consultation

Sie wissen nicht welche Forensik-Leistung Sie benötigen? Wir beraten Sie kostenlos und unverbindlich.

Related to this topic

All questions and answers at a glance →