Forensic data analysis consists in investigating an information system after a cyberattack. Analysts will collect all the raw data (deleted files, hard drives, backups, system logs…), study them to understand what happened and draw conclusions. This task, which is sometimes arduous, makes it possible to produce the evidence necessary for internal action or for legal proceedings, for example.
Learn more about Forensic Investigation at TEHTRIS
XDR/ CTI (Cyber Threat Intelligence) provides analysis, hunting and forensic investigation capabilities.