Data Collection Preservation

Improve investigations and reduce your potential for litigation and fines with the strict chain-of-custody protocol our experts follow at every stage of the data collection process.

Contact us
/en-ca/services/cyber-risk/incident-response-litigation-support/data-collection-preservation service
A Defensible Incident Response Starts With Reliable Evidence

When sensitive information is compromised, it’s critical to ensure electronic evidence is handled with precision and care to prevent it from being overwritten, destroyed, or otherwise corrupted. With Kroll, you can feel confident knowing our data collection and data preservation experts follow a strict chain-of-custody protocol at every stage of the process to improve the outcomes of on-site investigation and reduce your potential for litigation and fines.

Mitigate Risk Through Proper Identification and Preservation of Digital Evidence

Preserving critical electronic evidence during on-site investigation and threat containment/eradication paves the way for a successful incident analysis. At Kroll, our trained and certified forensic experts adhere to strict data preservation standards to ensure all potentially relevant data is captured and remains intact during an on-site investigation. We have the ability to quickly and efficiently capture electronic data from:

  • Email servers
  • Network shares
  • Desktop or laptop computers
  • Handheld and portable devices
  • Backup media

Whether gathering digital evidence from a single source or from multiple sources organization-wide, we apply forensically sound methods to preserve key digital evidence so you can establish a clear picture of the incident and launch an effective response. And because we’ve worked on hundreds of cases involving multiple data collection sites around the globe, you can trust us to perform an optimal on-site investigation, giving you the flexibility to pursue any available legal remedies.

People
Joel Bowers is a managing director
Joel Bowers
Managing Director
Cyber Risk
Toronto
Phone
Jason N Smolanoff
Jason N. Smolanoff
President, Cyber Risk
Cyber Risk
Los Angeles
Phone
Alan Brill
Senior Managing Director
Cyber Risk
Secaucus
Phone
Benedetto Demonte
Benedetto Demonte
Chief Operating Officer, Cyber Risk
Cyber Risk
Phone
Paul Jackson
Paul Jackson
Regional Managing Director, Asia-Pacific
Cyber Risk
Hong Kong
Phone

How we can help

Cyber Risk

Incident response, digital forensics, breach notification, managed detection services, penetration testing, cyber assessments and advisory.

Incident Response and Litigation Support

Kroll’s elite security leaders deliver rapid responses for over 3,200 incidents per year and have the resources and expertise to support the entire incident lifecycle.

Cyber

Tracking Exchange Online Powershell Access Into Microsoft 365 Environments

Oct 20, 2021

by Devon Ackerman Jonathan Holtmann, Scott Downie, Jamie Vendel

Cyber

Diving Deeper into EventTranscript.db

Aug 23, 2021

by Andrew Rathbun, Josh Mitchell, Devon Ackerman

Cyber

Enabling EventTranscript.db: Windows Settings

Aug 23, 2021

by Andrew Rathbun

Cyber

EventTranscript.db and Security Events

Aug 23, 2021

by Josh Mitchell