Cyber Forensics

Examination and analysis of digital evidence — the forensic side of the cyber investigation practice.

Digital Evidence Forensic Analysis Confidential by default

What the work involves

Examination of digital evidence from systems and storage as part of investigations.
Forensic analysis of data to reconstruct what happened and support findings.
Investigative support for incident-related casework.
Documentation — evidence handling and case documentation suitable for review.

This page describes the practice areas supplied by the owner. Specific tools, exhibits and case outcomes are confidential and are not published.

Where it fits

Forensics grew out of the freelance period (September 2023 – August 2026) and continues within ongoing independent engagements. It connects directly to the investigation side of the work:

Freelance practice Security case studies