Digital Forensics

Increasingly, evidence of wrongdoing perpetrated against organisations will be found on digital devices. This may occur through the actions of sophisticated cybercriminals or ordinary employees. Defensibly preserving and analysing the evidence required to support cases is becoming progressively more complex as the divisions between the corporate estate, the cloud and personal domain become increasingly blurred.

With our team of specialists, clients will benefit from rapid investigation of issues and crises allowing them to find answers and take action.

We offer Data Collection and Preservation services across a wide range of digital assets and cloud data sources. We use industry-leading forensic software and hardware to acquire data rapidly while preserving its integrity.

Our methodologies and controls are designed to meet courtroom acceptance criteria, and all digital evidence is handled in line with industry best practices in our purpose built secure Digital Forensic lab.

Some data sources from which we routinely collect data include:

  • Cloud-based repositories
  • Mobile devices such as cell phones and tablets
  • Hard-drive and portable storage media
  • Network devices
  • Computers including servers
  • Memory content from live systems (RAM)
  • Archived and historical data such as backup data in off-site or on-site locations, network-attached storage devices, storage arrays and tapes
  • Corporate file-sharing and email servers
  • Virtual environments
  • Databases and software applications

Our Digital Forensics professionals can provide actionable insights into forensic investigations related to a wide variety of cases such as fraud, corruption or misconduct cases through the examination of digital artifacts.

By focusing on file metadata and system artifacts, we can potentially uncover trails of device and user activity that could assist in the context of a forensic investigation or review. Activities may include, but are not limited to:

  • Device and user activity analysis and timelining
  • Data recovery and deletion analysis
  • Web history analysis
  • Document authentication 
  • Identifying use of external media devices
  • Advanced searches for files, information and applications and their traces

Get in touch

Rana Shashaa

Rana Shashaa

Partner | Middle East Forensic Leader

Rana Shashaa leads the Deloitte Forensic practice in the Middle East, the largest investigation and disputes practice in the region. She has over 18 years of experience across a range of forensic disc... More

Collin W. Keeney

Collin W. Keeney

Partner | Forensic

Collin has over 21 years of experience in Deloitte, including 11 years in the U.S. and 10 years in the Middle East. He leads the Business Conduct Investigations for Deloitte Forensic in the region, fo... More

Boray Altunisler

Boray Altunisler

Director | Forensic

Boray leads the Electronic Discovery team within the Forensic Technology practice in the Middle East. He has extensive experience in the eDiscovery field in the Middle East and the UK, and has led a n... More