Digital Forensics
Watch a Crime Thriller Rather than Ending up in One Yourself

Digital Evidence Search and Evaluation

You may think of forensics as the latest crime thriller. But it’s not just a mysterious murder that can be investigated forensically – a cyberattack can too. That’s exactly what we do in digital forensics. Our IT forensic experts systematically search for digital traces in a way that is suitable for court and clarify questions about how and why the incident occurred.

IT forensics investigations are about identifying hacker attacks, data theft, data loss or leakage, and fraud cases and assessing them using digital forensics. Strict rules apply to the investigation to prevent potential evidence from being irrevocably destroyed or rejected in court. Furthermore, IT forensic analyses require expert knowledge and specialized software and hardware. For this purpose, Oneconsult has specially trained and certified IT forensic experts as well as its own IT forensic laboratory.

  • Experienced, certified IT forensic experts
  • Methods and tools suitable for court
  • Response and prevention
  • Proven methods
  • Professional IT forensics laboratory
  • Discretion guaranteed
  • Communication at the appropriate level
  • Reliable partner of companies and authorities

We Get To the Bottom of the Cause with You

The techniques used in IT forensic investigations include:

  • Analysis of infected or compromised systems
  • Determination of the cause and/or gateway of infection
  • Develop recommendations for measures to prevent future infection or further incidents

After completion of the IT forensic investigation, you will receive a final report tailored to the target group, which includes the following information:

  • Management summary
  • Initial situation and goals
  • Hypotheses
  • Procedure/analysis
  • Insights
  • Recommended measures to be taken

Optionally, the incident and the findings are explained and discussed in detail during the final meeting.

Your Digital Forensics Fitness Check

Using a digital forensics readiness assessment, our specialists determine how well your organization is prepared for a future IT forensic investigation. The audit focuses, for example, on associated processes, the systematic logging of relevant information/activities, and the protection of log files from unwanted manipulation.

Want to find out more? We would be happy to answer your questions. You can find out how to reach us here.

Confirmed by our statistics

Every day, companies around the world rely on our expertise. This is confirmed by our statistics in addition to our long-standing customers.



0 +

IT forensics
investigations per year




We break into your company. You determine the question to be answered: Can I be hacked (red teaming) or will my team react correctly (blue teaming)? Or should the focus be on the interaction of offense and defense together with our ethical hackers (purple teaming)?

Systematic testing of your assets: Whether application, cloud, control or production system (ICS: SCADA/DCS), security system, aircraft, power plant, or train. We love the challenge and hack anything that is networked.

Your fire department for cybersecurity incidents. When there’s a fire, every second counts. Our computer security incident response team (CSIRT) provides competent support in correctly responding to ransomware, hacker attacks, and the like, and coordinates all involved agencies on request. Oneconsult extinguishes every cyber fire with you, so that you can concentrate on your daily business again.

Your fire investigators for digital incidents. After a security incident, our IT forensic experts systematically search for digital traces in a way that is suitable for court and clarify questions about how and why the incident occurred.

Your cybersecurity hub for security novices and professionals. Experienced trainers impart their expertise for people and companies that make the world safer – cutting-edge, practical, and oriented toward the target group. Increase the security awareness of your employees, achieve difficult certifications, develop secure software, or become an ethical hacker together with the Oneconsult Security Academy.

Don’t miss anything! Subscribe to our free newsletter.

Your security is our top priority – our specialists provide you with professional support.

Availability Monday to Friday 8:00 a.m. – 12:00 p.m. and 1:00 p.m. – 5:00 p.m (exception: customers with SLA – please call the 24/7 IRFA emergency number).

Private individuals please contact your trusted IT service provider or the local police station.

For more information about our DFIR services here:

Add CSIRT to contacts