INCIDENT RESPONSE SERVICES

Digital Forensics

Uncover what happened on your computer systems, network and mobile devices to aid in criminal, fraud, counterintelligence or corporate investigations.

Watch the BlackCat Ransomware Case Study

Download datasheet

Benefits
Use Cases
Methodology
Why Unit 42

BENEFITS

Complex digital investigations require specialized forensics experts

When cybersecurity disputes end up in court or lead to a regulatory or internal investigation, your legal counsel can count on Unit 42^® to analyze digital evidence and provide expert witness testimony.

Tour the Unit 42 Retainer

Expert litigation guidance after a breach

With Unit 42, your team can make informed legal decisions based on the facts and findings of a thorough digital investigation based on industry best practices and scientifically proven methods.

Identify evidence needed to convict

A thorough digital forensics investigation will uncover evidence of unauthorized activity in your environment and provide the details needed to pursue criminal or legal action.

Secure an expert witness to testify in court

Feel confident you have a digital forensics expert with proven experience to support expert witness testimony.

USE CASES

Here’s where we excel

Unit 42’s digital forensic experts have written books, performed extensive investigations and advised legal teams on some of the highest-profile data breaches.

INSIDER THREATS

INTELLECTUAL PROPERTY THEFT

MOBILE FORENSICS

EXPERT WITNESS TESTIMONY

METHODOLOGY

Our approach to digital forensic investigations

IDENTIFY

Collect digital evidence

Identify all evidence and understand how and where it is stored. This requires deep technical expertise and analysis of all manner of digital media.

PRESERVE

Isolate and secure all evidence

The next step is to isolate, secure and preserve all data until the end of the investigation, including any regulatory or litigation-related inquiries.

ANALYZE

Uncover the facts

The data is then reviewed and analyzed to draw conclusions on the evidence found.

DOCUMENT

Reconstruct the incident or crime

Relevant findings from analyzed evidence are used to recreate and document the incident or crime for a thorough investigation.

REPORT

Present findings

All evidence and findings are presented according to forensics protocols, including the analyst’s methodology and procedures. Unit 42 experts will testify in court if needed.

WHY UNIT 42

World-renowned security experts, always in your corner

As an industry-leading threat intelligence, cyber risk management and incident response organization, it's our job to help you prepare and respond to some of the most challenging threats so that your team can get back to business faster. As threats escalate, we act as your trusted partner to advise and strengthen your security strategies.

WORLD-CLASS THREAT INTELLIGENCE

Unit 42 provides access to one of the world’s largest and most experienced threat intelligence teams. Our team of more than 200 cyberthreat researchers includes threat hunters, malware reverse engineers and threat modeling experts who enable you to apply a threat-informed approach to prepare for and respond to the latest cyberthreats.

TRUSTED EXPERTISE & EXPERIENCE

Unit 42 has assembled an experienced team of security consultants with backgrounds in public and private sectors who have handled some of the largest cyberattacks in history. We manage complex cyber risks and respond to advanced threats, including nation-state attacks, APTs and complex ransomware investigations.

INDUSTRY-LEADING TOOLS

Unit 42 security consultants leverage industry-leading Palo Alto Networks tools to jumpstart your investigation by gaining necessary visibility across your endpoint, network, cloud and third-party data. This enables you to develop and execute a plan to get back to business as quickly as possible following an incident.

Related resources

See all resources

DATASHEET

Unit 42 Retainer

Read now

Case Study

Retailer evaluates impact of credit card skimming attack with analysis from Unit 42

Read now

GARTNER REPORT

4 Key Considerations to Perform Effective Incident Response

Embrace readiness

CASE STUDY

Unit 42 Customer Stories

Read now

Go from reactive to proactive

Our consultants serve as your trusted advisors to assess and test your security controls against the right threats, transform your security strategy with an intelligence-informed approach and respond to incidents in record time.

Digital Forensics

Complex digital investigations require specialized forensics experts

When cybersecurity disputes end up in court or lead to a regulatory or internal investigation, your legal counsel can count on Unit 42^® to analyze digital evidence and provide expert witness testimony.