Incident Response & Forensics (DFIR)
Our analysts establish how an attack started, where it spread and what data it reached. The goal is not only to close the incident but to stop the same path being used again. We have also built and accredited dedicated DFIR laboratories for large public-sector organisations abroad.
Discuss this service →Scope
Compromise assessment
- Determining whether an attacker is, or has been, present
- Threat hunting across endpoint, log and network data
- Assurance ahead of mergers, acquisitions or leadership changes
Incident response
- Scoping, containment and eradication
- Ransomware and targeted attack response
- Technical support for leadership and stakeholder communication
Forensics and DFIR laboratories
- Disk, memory, mobile and cloud forensics
- Examination and reporting that preserves evidence integrity
- Design, build and accreditation support for in-house DFIR labs
Other services
Systems & Network Services
We design, build and operate data center, systems, storage, backup and network infrastructure end to end.
Learn more →Security Assessment
An independent review of your identity, network and SIEM estate, with a prioritised roadmap.
Learn more →Security Technologies
Design, deployment, integration and tuning of SIEM, SOAR, EDR/XDR, NDR and DLP platforms.
Learn more →Let's review your infrastructure and security posture together.
Tell us briefly what you need and the right team will get in touch.