Cyber Forensics

When critical assets and systems come under attack, security professionals must be able to gather electronic evidence and utilize that evidence to prosecute those who are responsible. Cyber forensics is the process of extracting information and data both volatile and from computer storage media and guaranteeing its accuracy and reliability. Since electronic evidence is fragile and can easily be modified, finding this data, collecting it, preserving it, and presenting it properly in a court of law is the real challenge. Additionally, cyber thieves, criminals, and honest and dishonest employees hide, wipe, disguise, cloak, encrypt and destroy evidence from storage media using a variety of freeware, shareware and commercially available utility programs. Often times such attacks are the results of multiple instances or can be just the "tip of the iceberg" of something larger. Improper handling of forensics data can destroy an entire case or bring an investigation to a halt. All data should be left completely alone except by a trained cyber forensic expert. The Industrial Defender Cyber Security Consulting Services team leverages the combined capabilities in Cyber Forensics and expertise with SCADA and mission-critical real-time systems to provide a uniquely qualified team of professionals who can assist in those critical moments after a cyber incident.