Forensic Technology Solutions

Business activity has seen the migration of traditional theft and fraud from paper to the electronic realm. Today most organisations store their data electronically. The security and recovery of electronic data has an increasing role to play in both investigations and dispute resolutions. The advent of the information age has seen the birth of the cyber criminal, who stalks the Internet and global corporate networks. There is also a risk of abuse and reputational damage where employees abuse corporate systems and Internet access.

PwC provides a range of proactive and reactive investigation services to assist you should the threat or reality of cyber-crime become a concern. Our experienced team of investigators and data engineers are equipped with state-of-the-art tools to capture, preserve and analyse electronic evidence.

Potential issues

• You have a suspicious computer that needs to be imaged in order to ensure the integrity of the data contained on the computer .
• You have a suspicious computer that needs to be interrogated in order to recover passwords that would make access to the computer possible .
• You have a computer from a disgruntled employee that contain data essential to the effective operation of your business .
• You would like to identify suspicious or possibly fraudulent transactions in your business .
• You have a considerable amount of documentation that needs to be scanned and indexed.

• We can make a complete mirror image of the storage space of any computer, regardless of the operating system and the size of the storage media. The mirror image will be made in accordance with the principles of evidence collection and any evidence obtained from the computer would be allowable in a court of law .
• We can extract the data from the storage media and manipulate it into a logical and understandable format .
• We can recover deleted, corrupted and/or manipulated data from various types of storage media. This includes lost data, deleted data, slack space (temp files) unallocated clusters, signature (file extension) analysis, rebuilding of archived data (e-mail, backups, etc.)
• We can analyse, manipulate, sort, group and convert data into formats that are usable and/or suited to specific requirements. Data analysis includes the following: data manipulation, data sorting and grouping, data conversion and extraction, general ledger analysis, fraud detection on ERP systems, building entity relationship diagrams in a graphical format.
• We have access to scanning systems and have experience in indexing that makes the retrieval of documentation easy and effective.

• Information gathering – hardcopy and electronic
• Data imaging
• Data interrogation
• Data recovery
• Data reconstruction
• Data analysis
• Computer Incident Response Team (CIRT)
• Specialised computer/network forensics lab
• Training in IT forensic-related matters
• Attack penetration and forensic testing
• Analysis of complex networks
• E-fraud assessment diagnostics
• Developing of case management systems for deployment in the forensic environment