Computer & Network Forensics

Network Audit, Network Security, Security Testing, and Security Consulting
Packer Thomas offers professionally planned and implemented incident response, forensic investigation, and forensic services.

Ad-hoc investigations may cause more harm than good. Even with a clearly defined incident response plan, many organizations don’t have sufficient time or knowledge to perform skilled analysis of electronic crime scenes. Your decision to prosecute may rely on the crime scene investigation, your evidence, and how it is handled.

Packer Thomas minimizes your risks by professionally collecting, examining, analyzing, and preserving your evidence. Our managed forensics process provides a formalized approach to the forensics process. The chart below shows how your organization is threatened from many different directions.

Four Signs You Are A Victim
If you see any of these four signs, stop immediately and contact us - you may be the victim of an unwanted intruder:

• Physical evidence of damage. Files that have been modified or removed, a web site that has been modified or defaced, and applications that have been deleted are all examples that your security has been compromised.
• Your administrator. Your network administrator may come across a hacker's trail of evidence. Hackers don't always make mistakes but when they do you may be lucky enough to find them.
• Something just doesn't look right. A detailed analysis of your audit log files and network data can reveal differences between normal traffic and an intrusion.
• Intrusion detection system. An automated process with a variety of sensors scattered throughout a network to collect and analyze data. This data is examined for patterns that might indicate an attack.
  

Response
We identify and document the primary systems involved and prepare a plan of action.

• We review the Target of Evaluation (TOE) and the systems involved
• We analyze and determine how the attack was carried out
• We recommend steps to mitigate or remedy the situation
• We help determine if a crime scene suspect exists
• We work with the authorities and help you if you intend to prosecute the attacker
• We protect and prepare physical and electronic evidence
  

Forensics Toolkit
There are a variety of forensic tools and applications and the wrong tool may do more harm than good. Packer Thomas provides the capabilities and the right tools to make your response and investigation a success.

• Our process includes computer and network forensics planning and preparation
• We recommend our role in incident response and forensic investigation
• We consider and educate you on legal and regulatory implications
• Analyze cyber security risks and recommendations to mitigate threats
• We help you prepare an incident response policy and plan

» top

Please contact Jeff Sheets for more information: jsheets@packerthomas.com