02 / Digital Forensics

Comprehensive Digital
Forensic Services

Auditus Labs provides digital forensic services for the identification, acquisition, preservation, recovery, examination and analysis of electronic evidence.

COMPUTER FORENSICS

Evidence, examined with technical discipline.

Our computer forensic services cover desktops, laptops, workstations, servers and electronic storage devices.

  • Forensic imaging and cloning
  • File-system examination
  • Deleted file recovery
  • Hidden-data identification
  • Metadata analysis
  • Application artefact examination
  • Browser and internet artefact examination
  • User activity analysis
  • Operating-system artefact examination
  • External and removable-media analysis
  • Document and archive examination
  • Timeline reconstruction
  • Data extraction into readable formats
FORENSIC IMAGING & EVIDENCE ACQUISITION

Preserving the original evidence.

Auditus Labs performs digital evidence acquisition using appropriate forensic procedures designed to preserve the original evidence.

  • Physical acquisition
  • Logical acquisition
  • Bit-stream imaging
  • Device cloning
  • Forensic image creation
  • Write-blocked acquisition
  • Source and image validation
  • Cryptographic hash verification
  • Processing of E01, EX01, DD and AFF formats
MOBILE DEVICE FORENSICS

Mobile & Tablet Forensics

  • Android smartphones
  • Apple iPhones
  • Tablets
  • Device backups
  • Application data
  • Call records
  • Text messages
  • Messaging application data
  • Voice notes
  • Documents
  • Photographs and videos
  • Deleted artefacts
  • Cloud-linked information where accessible
DATA RECOVERY

Deleted & Damaged Data Recovery

  • Deleted files and folders
  • Deleted database records
  • Unallocated disk space
  • File carving
  • Partially overwritten files
  • Corrupted files
  • File-signature reconstruction
  • Log-based data recovery
  • Damaged databases
  • Database reconstruction
  • Application-data recovery
PROTECTED DATA

Password & Encryption Analysis

Protected data examination is performed only for authorised investigations.

  • Password recovery
  • Encrypted file identification
  • Protected-document examination
  • Archive-password analysis
  • Credential artefact analysis
  • Password-protected database examination
  • Hidden-data identification
  • Protected application-data examination
COMMUNICATION & MULTIMEDIA

Email, CCTV & Multimedia

  • PST, OST, MBOX, EML, MSG, DBX, TXT, HTML and MHTML examination
  • Keyword searching and thread reconstruction
  • Attachment and metadata analysis
  • Communication-pattern analysis
  • CCTV data acquisition
  • Video-file examination
  • Relevant clip identification
  • Correlation of multimedia evidence