FROM DFI FORENSICS
Knowledge & Insights
Practical advice to help you understand digital evidence, navigate investigations and prepare for cyber incidents. Find useful answers for your case or organization.
Article
WeChat Evidence in Litigation: Preserving Messages and Voice Notes
WeChat messages and voice notes can be important evidence. Preserving the source devices and preparing accessible, traceable records helps lawyers use that evidence with confidence.
WeChat messages and voice notes can be important evidence. Preserving the source devices and preparing accessible, traceable records helps lawyers use that evidence with confidence.
Read article
Article
Before You Search a Client’s Laptop, Preserve the Evidence
A quick look at a client’s laptop can leave a lasting forensic footprint. Preserve the evidence before searching, and keep your case focused on the events that matter.
A quick look at a client’s laptop can leave a lasting forensic footprint. Preserve the evidence before searching, and keep your case focused on the events that matter.
Read article
Article
What does it mean to be BreachReady?
Understand your readiness level—and how specialist support, a practised response and ongoing risk reduction can help protect your operations, finances and reputation.
Understand your readiness level—and how specialist support, a practised response and ongoing risk reduction can help protect your operations, finances and reputation.
Read article
Article
Need Text Messages for Court? What Lawyers Should Know About Phone Extractions
What happens during a phone extraction, what analysis follows and how your client can prepare. Practical advice for litigation lawyers, with a downloadable reference to keep or share.
Prepare your client’s phone and understand the steps from extraction to verified message records.
Read article
Article
When a PDF of Text Messages Is Disputed
If a message exhibit is disputed, we help you identify what needs to be tested and compare it with lawfully available source records. We explain what can be established and where the evidence falls short when devices or accounts are unavailable.
Understand what the underlying evidence can establish when a text-message PDF is challenged.
Read article
Article
Mobile Messaging Evidence Beyond Screenshots
We help you plan the preservation and examination of mobile conversations, from SMS, MMS and iMessage to WhatsApp, WeChat, Telegram and Signal. The right approach depends on your devices, accounts and available records; no method can promise access to every device or backup.
See what phone and app records can reveal beyond screenshots, including conversation context.
Read article
Article
Suspected Employee Data Theft and Evidence Preservation
When you suspect employee data theft, you need to protect the business without losing the evidence. We explain how to coordinate offboarding, lawful collection, cloud logs and device evidence while keeping allegations separate from verified facts.
Preserve the devices and accounts that matter when investigating suspected employee data theft.
Read article
Article
Business Email Compromise: Verify the Payment, Not Just the Email
A familiar email thread does not authorize a payment. We explain how trusted callbacks, independent approval and a clear fraud response can help your team verify a request before money moves.
Help your team recognize and respond to suspicious changes in payment instructions.
Read article
Article
Ransomware Readiness: Recovery Takes More Than Restoring Servers
Backups help you recover data, but your business needs more than restored servers. We explain how to connect virtual-server protection, tested dependencies, useful evidence and leadership decisions in your recovery preparation.
Prepare your people, decisions and specialist support for a ransomware incident, beyond backups.
Read article