Digital forensics · Incident response · Cyber readiness

WHO WE SERVE / INDIVIDUALS & ESTATES

A clear assessment before a device examination.

You may need to preserve messages for a legal matter, understand records on an estate device, or assess access to a phone whose passcode is unknown. We start by checking the purpose, authority, and technical feasibility—then explain whether a focused forensic service is appropriate.

THE SUITABILITY CHECK

Answer the essential questions before an examination.

01

Purpose

A specific question within DFI’s services.

02

Authority

Appropriate instructions for the device and records.

03

Feasibility

A supported method for the particular device or source.

Proceed only with an agreed, suitable scope.

If a requirement is not met, we explain the limitation rather than promise access.

An assessment is not a promise to unlock a device or recover particular records.

WHY DFI

Understand what is possible before you commit.

A phone or computer can be important because of the information it may hold. That does not mean every device can be accessed or every record recovered. We discuss the particular device or account, the information you need, and who can authorize the work. You receive a realistic explanation of the available route, rather than a promise of a result before the device is assessed.

Where a legal or estate matter is involved, we can coordinate with your lawyer or authorized representative. Their instructions help define the purpose and boundaries; our role is to assess and perform the agreed technical work.

WHERE WE CAN HELP

When a focused forensic inquiry may be suitable.

These examples describe possible requests. Suitability and access must be assessed for the actual matter.

01

Messages are needed for a legal matter

We discuss the device, application, participants, and dates, then assess how relevant conversations and attachments may be preserved and produced. The examination is directed at the agreed question, not an unrestricted search of someone’s private life.

02

An estate device may hold relevant records

An authorized representative may need particular documents or communications. We clarify the requested material and documentation with the representative and, where appropriate, counsel before arranging any access or examination.

03

A phone passcode is lost or unknown

We can assess specialist access options for the particular phone. Model, operating-system version, security state, and condition matter. An initial discussion is a feasibility assessment—not a guarantee that the phone can be unlocked.

THE WORK, MADE CONCRETE

What we need to assess the request.

Start with information you already know. Do not change the device or repeatedly guess a passcode to complete this list.

What we need to assess the request.
Tell us aboutWhy it mattersWhat happens next
The purposeA specific evidence question helps establish whether forensic examination is the right service.We discuss the relevant records and whether the request fits DFI’s work.
The authorityPossession of a device alone does not settle who can authorize access to every account or record.We clarify required instructions or documentation; legal advice stays with your adviser.
The device or accountModel, software, condition and available access affect technical options.We assess supported methods and explain known limitations.
The intended useA personal review, counsel’s review and an expert report may require different work.We agree scope, deliverable, handling and fees before the engagement proceeds.

COLLABORATION, WITH BOUNDARIES

A defined purpose protects everyone involved.

You or the authorized representative

Explains the request, identifies the device or account, and supplies the information needed to establish authority.

Counsel, where involved

Advises on legal authority and the intended use of the material, and provides appropriate instructions.

DFI

Assesses technical feasibility, proposes a focused scope, and explains the work, findings, and limitations.

We agree the scope, authority, access, reporting, and responsibilities before the work proceeds.

WHAT YOU RECEIVE

A clear next step, not an open-ended promise.

We agree deliverables before work begins. The appropriate format depends on your purpose, the available evidence, and the engagement.

01

A suitability discussion

An initial assessment of whether the request belongs within our forensic services.

02

A feasibility explanation

What information is still needed, what methods may be supported, and which access limitations are known.

03

An agreed examination

Where appropriate, a documented collection and focused review of the records specified in the engagement.

04

Usable findings or records

An agreed export, selected records, or a report appropriate to the purpose and available evidence.

A USEFUL FIRST CONVERSATION

Check whether your request fits before sending a device.

Contact us with a concise outline. Do not send passwords, private messages, evidence files, or a physical device until we have agreed the next step and a secure way to provide material.

Check suitability

Helpful information to have ready

  • A short description of the specific records or question, without confidential detail.
  • The device make and model, and software version only if already known.
  • Your relationship to the device or estate and whether counsel is involved.
  • Relevant dates and the intended use of any findings.

Keep credentials and sensitive evidence out of the initial inquiry. We will agree a secure intake route if the matter proceeds.