Forensic Analysis
N1D designs computer forensic investigations to meet the objectives of its clients. You can rely on our extensive experience in all aspects of digital investigations, from forensic imaging and artifact recovery to reporting and expert testimony. Common investigations include:
- Recovery of data exfiltration artifacts for trade secret cases
- Log file analysis related to unauthorized use
- Search and export relevant case data based on unique criteria, including eDiscovery
- Evidence of unauthorized access to devices and accounts
- Identification of deletion and “wiping” activity to obfuscate nefarious activity
- Data recovery after intentional data destruction by users
- Identification of sexually explicit content
Forensic Analysis
N1D designs computer forensic investigations to meet the objectives of its clients. You can rely on our extensive experience in all aspects of digital investigations, from forensic imaging and artifact recovery to reporting and expert testimony. Common investigations include:
- Recovery of data exfiltration artifacts for trade secret cases
- Log file analysis related to unauthorized use
- Search and export relevant case data based on unique criteria, including eDiscovery
- Evidence of unauthorized access to devices and accounts
- Identification of deletion and “wiping” activity to obfuscate nefarious activity
- Data recovery after intentional data destruction by users
- Identification of sexually explicit content
Apple® Device Forensics
Apple’s computers (MacBook, iMac) and mobile devices (iPhone, iPad) present unique challenges for forensic examiners due to Apple’s stance on security and data protection, short-lived artifacts, distributed log structure, and frequent changes to operating system structure.
N1D’s forensic team has been trained in the latest artifacts and analysis techniques of macOS devices to extract the most valuable information.
Mobile Device Forensics
Mobile devices have rapidly become one of the most important sources of information in modern forensic examinations. N1D’s forensic team uses its experience and state-of-the-art tools to extract, analyze, and organize information from Apple® and Android® mobile devices. N1D recovers and examines available artifacts related to:
- Key messages from multiple communication apps like Snapchat, Instagram, WhatsApp, iMessage, and Facebook
- Categorized media files to identify specific content such as screenshots, whiteboards, and sexually explicit content
- Deleted content
- Geolocation data, including Wi-Fi network connections, EXIF data, and navigation apps
- Fragmented data reconstructed from complex databases
- Previously unknown accounts and apps
- Cloud backups containing data that no longer exists on the device
Cloud Forensics
Today, users leverage multiple cloud accounts for data storage, email, social media, messaging, etc. Each platform has its own complexities and challenges regarding which forensic artifacts can be recovered. As part of a comprehensive forensic investigation, N1D analyzes the following from cloud data sources:
- Login history
- Source IP address identification and correlation
- Data access and deletion events
- Transfer of data to external sources
- Syncing of company data to personal devices
