Resources

• Digital Forensics FAQ

  Answers to the questions clients ask before an engagement: how examinations work, when to involve an examiner, and how evidence is preserved.

• Cybersecurity Acronym Glossary

  The acronyms used across forensics, incident response, operational technology and regulatory practice, expanded and explained in plain language.

• Cybercrime Terminology

  Plain-language definitions of the attack techniques, tooling and terminology that appear in incident reports, pleadings and breach notifications.

• Common Digital Evidence Mistakes

  What most often damages digital evidence before an examiner ever sees it, and what to do instead when a matter is first identified.

• The Digital Forensics Process

  A step-by-step walkthrough of an examination, from preservation and imaging through analysis, reporting and testimony.

These references are preserved from the original evestigate.com library. They describe practice as it stood when they were written; current engagement scope is set case by case.