Service overview
What this service is designed to establish
Supports authorised examination of smartphones or tablets to answer defined questions about communications, files, applications, activity or device artefacts.
The first task is to convert a broad concern into specific questions that can be investigated responsibly. The method, duration and deliverables then follow from those questions—not from assumptions about what the answer should be.
Questions the engagement may address
Who owns and authorises access to the device?
What data categories and dates are relevant?
Is forensic preservation required?
What encryption, damage or overwrite risks exist?
