Reconstruct events through digital evidence.
Examine device, account and system data within authorised scope, documenting origin, integrity and analytical limitations.
Scope and deliverables defined for your business.
BARUCH / ANALYSIS AND EXECUTIONForensic technical report
01 / When it makes sense
A leak, incident or suspicion requires clarification of events and conclusions tied to available digital materials.
Legal, investigation, Internal Audit and Information Security teams seeking to clarify incidents or conduct.
In practice
Hypothetical examples of situations where this solution can help your organisation.
Data from authorised accounts, devices or systems needs examination to reconstruct events related to the exposure.
There are questions about when payment details changed and which records support that sequence. Authorised analysis of accounts and systems helps establish what the data can and cannot show.
An enquiry into diverted goods, funds or an online scam depends on messages and digital records. Analysis needs to document the origins and preservation procedures of those materials.
02 / From analysis to decisions
03 / Your deliverables
Choose an option to see an example deliverable.
Swipe the options to see more deliverables →
Findings, referenced evidence and limitations from the analysis of materials in scope.
Illustrative structure. No client data or results.
Is file access recorded during the defined period?
Scope and authorisation documentedA matching event appears in the available records.
Fictional reference EX-01The record alone does not identify who was operating the account.
Conclusion limited to the materialThe analysis links conclusions to the examined material and explains what the records cannot establish.
Content and depth are defined according to your project scope.
A sequence of events reconstructed from the available records.
Illustrative structure. No client data or results.
Authentication recorded by the examined source.
Fictional source EX-01File access within the available interval.
Fictional source EX-02The sequence contains a gap that limits reconstruction.
Do not infer missing eventsThe chronology retains references, intervals and gaps. A time relationship does not, by itself, prove authorship.
Content and depth are defined according to your project scope.
Documentation of origin, integrity and procedures applied to the data examined.
Illustrative structure. No client data or results.
Material EX-01 and its provider recorded.
Example identificationProcedure and integrity verification documented.
Preservation-record referenceWorking copy linked to the preserved material.
Procedures and limits recordedThe records allow origin, integrity and handling to be traced. This illustration is not a chain-of-custody record from a real case.
Content and depth are defined according to your project scope.
Which decision should this deliverable support?
Tell us what you need04 / The work
Explore the stages of the work. The scope starts with your context, available information and the decision your business needs to make.
We agree the analytical questions and devices, accounts or systems included in the authorised scope.
We collect and examine data, recording origin, integrity and preservation procedures while connecting events over time.
We present findings, referenced evidence and technical limitations to support response, internal enquiries and legal assessment.
05 / A tailored scope
Combine the capabilities your challenge requires.
We collect and analyze data within the authorized scope, documenting its origin, integrity and preservation procedures while examining event timelines and relevant technical limitations.
Deliverable: A technical report containing a timeline, referenced evidence, findings and analytical limitations to support response decisions, internal investigations and assessment by the organization's legal advisers.
Contact Baruch
Chat on WhatsApp or prepare your enquiry using the form below.
Let's talk
Add your details and a short description to prepare your enquiry by email or WhatsApp.
Connected solutions
Investigate diverted funds or goods, false documents, procurement and expense fraud, supplier collusion and online scams. We gather evidence to clarify the facts and inform decisions.
Explore the service
Pentest validates vulnerabilities through controlled exploitation. Red Team emulates adversary actions to assess detection and response. Both follow agreed authorisation, scope and rules of engagement.
Explore the service
Connect digital exposure, leaks and threats to reputation or operations through contextual analysis for the company and its leaders.
Explore the service