GladiatorRX

Digital forensics

Digital forensics and incident investigation

When something has gone wrong, you need facts quickly. We preserve evidence properly, rebuild the timeline, and establish what happened, what was affected and how to stop it happening again.

Get a quoteCall +91 96231 11662
Sample incident timelineCase GRX-IR-014
  1. Unusual login to finance mailbox from new location
  2. Mail forwarding rule created to an outside address
  3. Payment instruction emails sent to two vendors
  4. GladiatorRX engaged; evidence preserved
  5. Access revoked; scope and root cause confirmed
Root cause confirmed · report delivered

Coverage

What we test

We agree the exact scope with you on the scoping call. These are the areas we typically cover.

Evidence acquisition

  • Computers and servers
  • Mobile devices
  • Cloud and email accounts
  • Logs and network data

Investigation

  • Incident timeline reconstruction
  • Root-cause analysis
  • Scope of data accessed
  • Malware and intrusion analysis

Case types

  • Business email compromise
  • Ransomware and intrusions
  • Insider data theft
  • Fraud and policy violations

Reporting

  • Chain-of-custody documentation
  • Reports for management, insurers and legal
  • Support for CERT-In incident reporting

Deliverables

What you receive

  • Preserved evidence with chain of custody
  • Incident timeline
  • Root cause and scope of impact
  • Containment and recovery recommendations
  • Report suitable for legal and insurance use

Aligned to NIST SP 800-86 · ISO/IEC 27037

Is it right for you?

Choose this if…

  • You suspect a breach or intrusion
  • An employee may have taken data
  • You've been hit by fraud or ransomware
  • Legal or insurance needs an independent report
Request a quote

Process

How the engagement runs

  1. Scope

    A 30-minute call to agree on targets, testing windows and rules of engagement. You get a fixed quote.

  2. Map

    We map what's in scope: features, user roles, integrations, and anything exposed that wasn't on the list.

  3. Test

    Hands-on testing by certified testers. Critical issues are reported to you straight away.

  4. Report

    A summary for leadership, plus a detailed finding for each issue with evidence and a specific fix.

  5. Retest

    We verify your fixes and issue an updated report and attestation letter.

FAQ

Digital forensics: common questions

How quickly can you start?

Call us on +91 96231 11662. For active incidents, we aim to begin remote triage the same day.

What should we do before you arrive?

Don't switch off or reimage affected machines, and don't delete anything. Disconnect them from the network if you can, and write down what you've noticed and when.

Do we have to report to CERT-In?

Many cyber incidents must be reported to CERT-In within six hours of being noticed, under its April 2022 directions. We can help you work out whether yours qualifies and what to include.

Related

Often combined with

Penetration testing

Hands-on security testing of your web applications, networks and cloud by certified testers.

PTES · OWASP WSTG · NIST SP 800-115 Learn more

Vulnerability assessment

A broad, verified sweep of your infrastructure for known weaknesses and missing patches.

CVSS 3.1 / 4.0 · NIST SP 800-115 Learn more

API security testing

In-depth testing of REST, GraphQL and gRPC APIs, covering access control, authentication and business logic.

OWASP API Security Top 10 Learn more

Find out where you're exposed before an attacker does.

Tell us what you need tested. We'll reply within one business day with questions or a fixed quote.

Get a quote Call +91 96231 11662