Capture-only services

In many cases, our customers want to preserve digital evidence at a low cost without performing any analysis, but allowing the possibility of detailed analysis to be performed at a later date.

DFIR VN can provide with evidence preservation-only services if preferred. Our services provide:

  • Fast capture. Our portable lab systems can image 1TB per hour.
  • Results provided on 3.5 inch SATA HDD  included in the cost of the service. Other storage methods on request.
  • Tamper-proof digital signature sealing the capture metadata (technician, time of capture, source harddrive serial number, and other notes). The image can not be tampered with without breaking the signature. More technical information in our digital signature process writeup.