Incident Response and Litigation Support

Data Recovery and Forensic Analysis

Kroll's expertise establishes whether data was compromised and to what extent. We uncover actionable information, leaving you better prepared to manage a future incident.

Explore Cyber Risk

Cyber Insights

Data Recovery: Extending Your Window of Opportunity

When a data breach event occurs, your company only has a short window of time to gather critical evidence. Internal IT resources are often forced to act as a first line of defense – but first responders who are untrained in data recovery and forensic analysis sometimes do more harm than good, damaging critical data or inadvertently mishandling important evidence.

The experts at Kroll have unparalleled experience using forensic software and protocols to perform data collection and data preservation in the wake of a breach. We handle evidence with proven, forensically sound methodology, using data recovery tools and processes that are supported by case law.

We’ll apply forensic science to your technology – from servers to laptops and smartphones – and investigate your physical systems and personnel, getting real answers to your questions and establishing whether data was compromised and to what extent.

Forensic Analysis With an Eye on the Future

Our team members are Certified Information Privacy Professionals (CIPP) and well-versed in the most specialized data recovery tools and processes. We always employ forensically accurate processes, including appropriate chain of custody and documentation. We understand case law regarding the accuracy and reliability of digital tools. We’ll apply state-of-the art technology to your forensic analysis, but we also have the experience to accurately interpret findings, turning data points into a clear story and timeline that can be presented in court.

With Kroll, you can rest assured that your first responders are thinking beyond the immediate crisis towards an enhanced security posture for your company. We’ll work with your counsel on forensic analysis and incident recovery that leaves you in the strongest possible position; we’ll also leave your company protected and better prepared to manage future incidents.

Key Areas

Increased Cyber Resilience with a Cyber Risk Retainer

Kroll delivers more than a typical incident response retainer—secure a true cyber risk retainer with elite digital forensics and incident response capabilities and maximum flexibility for proactive and notification services.

Start Now

Related Team

Connect With Us

Jaycee Roth

Associate Managing Director

Cyber Risk

Toronto

+1 4168134470

Jaycee Roth

Christopher Ballod

Managing Director

Cyber Risk

Philadelphia

+1 201 3198 046

Christopher Ballod

Scott Downie

Associate Managing Director

Cyber Risk

Secaucus

+1 2013198047

Michael Quinn

Managing Director

Cyber Risk

Secaucus

+1 202 384 6946

Michael Quinn

Explore areas we can helpStay Ahead with Kroll

Data Collection and Preservation

Improve investigations and reduce your potential for litigation and fines with the strict chain-of-custody protocol our experts follow at every stage of the data collection process.

Computer Forensics

Kroll's computer forensics experts ensure that no digital evidence is overlooked and assist at any stage of an investigation or litigation, regardless of the number or location of data sources.

24x7 Incident Response

Enlist experienced responders to handle the entire security incident lifecycle.

Office 365 Security, Forensics and Incident Response

Digital forensic experts investigate hundreds of Office 365 incidents per year and help strengthen your security.

Malware Analysis and Reverse Engineering

Kroll’s Malware Analysis and Reverse Engineering team draws from decades of private and public-sector experience, across all industries, to deliver actionable findings through in-depth technical analysis of benign and malicious code.

Malware and Advanced Persistent Threat Detection

Our expertise allows us to identify and analyze the scope and intent of advanced persistent threats to launch a targeted and effective response.

Business Email Compromise (BEC) Response and Investigation

In a business email compromise (BEC) attack, fast and decisive response can make a tremendous difference in limiting financial, reputational and litigation risk. With decades of experience investigating BEC scams across a variety of platforms and proprietary forensic tools, Kroll is your ultimate BEC response partner.

Digital Forensics Services

In the event of a security incident, Kroll’s digital forensics investigators can expertly help investigate and preserve data to help provide evidence and ensure business continuity.