Digital Forensics and Incident Response

Addressing Threats – Gathering Evidence

SySS provides support in resolving IT security incidents and securing data that may be used as evidence in court.

Digital forensics

Digital forensics aims at acquiring and analyzing data in IT systems that is admissible in court. In case of abuse or suspected abuse, SySS provides assistance in realizing all required steps and measures to implement a digital forensic operation: 

• Securing evidence from various types of devices that is admissible in court proceedings
• Post-attack analysis of log files
• Detection of undesirable network activity

SySS operates its own forensic laboratory and holds a comprehensive set of software and hardware tools to ensure the most efficient processing of any occurring incidence.

Incident Response

Given the increasing quality of security attacks on company's IT networks, a structured approach facilitates a rapid resolution of the incidents and the re-establishment of a safe status. Thanks to our many years of experience in detecting and assessing security gaps, we also have the necessary know-how to provide assistance beyond the mere analysis effort.

• Investigation and appraisal of attacks on your company network
• Provision of support in case of cyber espionage and advanced persistent threats (APT)
• Competent telephone advice
• Individual workshops and trainings for your IT security staff

We are active members of the International Responder Community, the Alliance for Cyber Security of the German Federal Office for Information Security (BSI) and BITKOM. Professional training and creative solution strategies are an integral part of our day-to-day business.

Crisis and incident management

Without a functioning IT, most modern companies are not able to work anymore. A security incident – regardless of whether it is an encryption Trojan or industrial espionage – can very rapidly evolve into a company-wide crisis.

SySS supports you in every phase of an incident, ideally starting with the preparation for incidents. This entails the structure or rather the improvement of the incident and crisis management processes or the technical and organizational abilities to recognize and defend attacks (“incident readiness” and setting up a “defensible network”).

During an ongoing incident, we actively assist you in defending yourself. Moreover, we contribute to your incident management, do the preparatory work for the crisis committee, support you in a moderating way or with our technical and methodical skills, or take a role within the crisis committee. Additionally, we are ready to help you find, for instance, top-level experts for crisis communication using our network.

And even after an incident, there is plenty to do: The spectrum ranges from the implementation of a good post-mortem workshop via the revision of the working processes and the optimization possibilities to the determination of the measures to be taken in order for the next incident to pass off more smoothly.

As a matter of course, SySS offers a 24/7-hotline and -help.