Urgent Digital Forensics Investigation
Budget: $250 – $750 AUD
A recent security event has left several endpoints and one cloud mailbox under suspicion, and I need a rapid, professional digital forensics analysis completed as soon as possible. The scope focuses only on evidence preservation and fact-finding; no broad remediation work is required at this stage.
What I need you to handle right away:
• Forensically image one Windows laptop, one mac laptop, one iOS iPhone and analyse router log files. O365 mailbox, maintaining full chain of custody.
• Extract and verify volatile data (RAM dumps, page files, hibernation files) and key artefacts such as browser history, USB usage, registry hives, and email headers.
• Reconstruct a clear timeline of user and process activity, highlighting any unauthorized access, data exfiltration indicators, or malware persistence mechanisms.
• Document all findings in a concise report that includes SHA-256 hashes of acquired media, screenshots or log excerpts backing each conclusion, and straightforward next-step recommendations.
Preferred tooling: EnCase or FTK for acquisition, Autopsy or X-Ways for analysis, and Volatility for memory forensics. If you rely on another industry-accepted platform, note it in your approach.
I will supply written authorization, target device access, and a secure upload location immediately upon kickoff. Because the need is ASAP, please outline how quickly you can start, your estimated turnaround, and any prerequisites you need from me before imaging begins.
What I need you to handle right away:
• Forensically image one Windows laptop, one mac laptop, one iOS iPhone and analyse router log files. O365 mailbox, maintaining full chain of custody.
• Extract and verify volatile data (RAM dumps, page files, hibernation files) and key artefacts such as browser history, USB usage, registry hives, and email headers.
• Reconstruct a clear timeline of user and process activity, highlighting any unauthorized access, data exfiltration indicators, or malware persistence mechanisms.
• Document all findings in a concise report that includes SHA-256 hashes of acquired media, screenshots or log excerpts backing each conclusion, and straightforward next-step recommendations.
Preferred tooling: EnCase or FTK for acquisition, Autopsy or X-Ways for analysis, and Volatility for memory forensics. If you rely on another industry-accepted platform, note it in your approach.
I will supply written authorization, target device access, and a secure upload location immediately upon kickoff. Because the need is ASAP, please outline how quickly you can start, your estimated turnaround, and any prerequisites you need from me before imaging begins.