Skip to content

Digital Forensics & Incident Response (DFIR)

Management & clarification of IT security incidents

Zwei Männer stehen in einem Rechenzentrum, einer tippt etwas in den Laptop, den er hält.

Managing IT security incidents & securing evidence

In the event of an IT security incident, time is both your strongest opponent and your strongest ally. If a cyber attack occurs, you need to act quickly and efficiently to analyse what has happened and initiate suitable countermeasures. A swift and competent approach helps you to avoid major damage and quickly return to normal operations.

With our services in the area of incident response and digital forensics (DFIR), we provide you with competent and reliable support in dealing with IT security incidents.

  • Rapid assistance in an IT emergency
    If an IT security incident occurs, you need to act immediately. Our experts are there for you by phone, remotely and on site to support you in this challenging situation.
  • Psychological support
    An IT security incident is an exceptionally stressful event and has an impact on the psyche of employees. We help you to prepare and are there for you with psychological expertise in an acute case.
  • Report with recommendations for action
    We fully document our activities and prepare our findings in a comprehensive report. With our recommendations for action, we provide you with specific implementation measures to help you prevent a successful attack from happening again.
Help in an IT emergency

Our Emergency-Hotline

Have you noticed an IT security incident? Our experts are there for you!

+49 30 200 770033

Your benefits at a glance

  • Rapid containment of the cyber incident
    In the event of an IT emergency, we help you to define the necessary organisational and technical measures to avert the incident.
  • Expert remote & on-site support
    Our DFIR experts are there for you both remotely and on-site.
  • Professional analysis & preservation of evidence
    We go in search of digital evidence for you, analyse the events & preserve relevant data and evidence.
  • Rapid resumption of business operations
    The aim of a planned approach to investigating and defending against a cyberattack is to enable you to restore normal IT operations as quickly as possible.
  • Procedure according to international standards
    Our DFIR experts are guided by industry standards such as BSI IT forensics, ISO/IEC 27042/27043 & NIST 800-61.
  • Sound recommendations for the future
    The final report also provides you with recommendations for action to defend against future attacks.

Incident Response

Successful defence against attacks

In an emergency, you need to act quickly: the more effectively you respond to an IT security incident, the greater the chance of preventing data theft or system encryption.

Our incident response team supports you in containing damage, resuming business operations and investigating the incident - both remotely and on site.

But our experts are also there for you before or after a cyber security incident, for example by creating an incident response management plan or conducting forensic analyses.

Ein Mann sitz an einem Schreibtisch mit zwei Bildschirmen und analysiert Daten.

Digital Forensics

On the trail of the perpetrators

Have you been the target of a cyberattack and would like to find out how the incident occurred or who was behind it?

Our IT forensic experts will locate the relevant data traces on your IT systems, analyse them, determine the damage and secure evidence that can be used in court.

Lessons learnt: By reconstructing the attack, we also uncover how it was carried out and provide you with suitable recommendations for remedial action.

Psychological counseling and support

Taking people with you

Would you like to know more about the significance of a cyberattack and its impact on the psyche and ability to work? Would you like to strengthen the resilience of your employees and know what helps in an acute case so that the negative consequences for the psyche are minimised - and what to do if someone does suffer more?

We are there for you with psychologists in a recurring half-day workshop and will work with you to find the right way for you to prepare. We will also create a personalised file for you so that we can provide quick and targeted support if the worst comes to the worst.

Should a cyberattack occur, we will be there for you within a short time with psychologists in an executive consultation. We share customised tips and recommendations for action on healthy leadership, strengthening resilience, warning signals from the psyche and interventive steps.

You can find more information on a healthy mind at work at MEDITÜV-Mental Health.

Our approach in case of an IT emergency

1

Case recording

Report the IT security incident to our IR Service Desk.

2

First aid

Initial qualified feedback from our IR experts to coordinate immediate measures.

3

Preservation of evidence

Backup & collection of all relevant evidence from main memory & hard drives for forensic analysis.

4

Forensic analysis

Remote or on-site analysis of the secured artefacts to clarify the course of events.

5

Recovery/report

Preparation of the report & support in the implementation of the remediation strategy.