Français
NederlandsDigital forensics and expert witness services
Smartphone, computer, server, camera or connected device: we establish what the digital traces actually show, with a method that holds up in court. Court-appointed expert registered with the Belgian FPS Justice, ISO/IEC 27001 certified firm.
Who it is for, in which situations
- Lawyers: technical adviser to a party, critical review of the opposing report, help in framing requests for further investigative measures.
- Courts: court-appointed expert assignments.
- Insurers: establishing the facts after a cyber claim, ransomware or fraud.
- Companies: investigation after an intrusion, ransomware or data breach, timeline reconstruction.
- Individuals: suspected spyware or abusive monitoring on a phone.
What we analyse
iOS and Android smartphones
Extraction and analysis of data, system logs and apps, preserving the integrity of the device.
Computers and servers
Disk images, memory, event logs and execution traces to reconstruct what happened.
CCTV and connected devices
Extraction of recordings from cameras and recorders (NVR/DVR), timestamp and integrity checks.
Spyware
Searching for an infection or abusive monitoring on a phone, from check-up to expert report.
Incidents and ransomware
Entry point, timeline and affected data, to decide on next steps and support notifications to the data protection authority or the CCB.
Court-appointed expert or technical adviser
Appointed by the judge, or alongside a party as technical adviser, never in both roles in the same case.
How an assignment works
A finding is only as good as its method. Every step is documented so that another expert can verify it.
First conversation
You explain the situation in confidence. We tell you what can be established, how to preserve the evidence and how the assignment will be framed.
Acquisition
Copies of the media with hash values, documented intake and a traceable chain of custody.
Analysis
Examination of the traces with recognised tools, cross-checking of sources and timeline reconstruction.
Report
Method, findings and limitations, then measured conclusions: what the traces establish, what they suggest and what they cannot tell.
Frequently asked questions
Can a privately commissioned expert report be used in court?
Yes. A report prepared at a party's request can be filed as evidence, and the judge freely assesses its probative value. That value depends mainly on the method: documented acquisition, hash values of the media, chain of custody and conclusions limited to what the traces establish.
Court-appointed expert or technical adviser: what is the difference?
The court-appointed expert is designated by the judge and works for the court, independently of the parties. A technical adviser is retained by one party to analyse the evidence, attend the expert's operations and make observations.
What should I do while waiting for the analysis?
Do not reset the device, delete anything or run 'clean-up' tools. Disconnect a compromised computer from the network and, if possible, do not switch it off before taking advice. Write down the dates and what you observed.
How much does an investigation cost?
You receive a quote after the first conversation: the cost depends on the number of devices, the volume of data and the questions asked. In court-appointed assignments, fees follow the framework set by the court.