{"id":11512,"date":"2026-10-13T09:17:45","date_gmt":"2026-10-13T09:17:45","guid":{"rendered":"https:\/\/isoft.ao\/servicos\/investigacao-forense-digital\/"},"modified":"2026-10-13T09:17:45","modified_gmt":"2026-10-13T09:17:45","slug":"investigacao-forense-digital","status":"publish","type":"page","link":"https:\/\/isoft.ao\/en\/servicos\/investigacao-forense-digital\/","title":{"rendered":"Digital forensics"},"content":{"rendered":"
\"\"
Service 05 \u00b7 Cybersecurity<\/span>

Digital forensics<\/h1>

Preserve evidence. Reconstruct events. Inform decisions.<\/p>

Talk to us<\/a>See the scope<\/a><\/div><\/div><\/section>
The solution<\/span>

We analyse digital evidence in a structured manner to support internal investigations, understand incidents and establish the sequence of events. Whether the question is how an attacker got in, whether an employee copied client data, or what really happened to a deleted set of records, the answer has to stand up to scrutiny. We collect evidence with authorisation, record its integrity, analyse it methodically and report what the evidence shows and what it does not.<\/p><\/div>

Business value<\/h3>

Evidence-based decisions with traceability of the analysis performed.<\/p><\/div><\/div><\/section>

Service scope<\/span>

Digital forensics<\/h2>

Four stages, each with a clear deliverable. Where AI helps, it is marked.<\/p>

01<\/span>

Scope definition and authorised evidence collection<\/h3>

We agree in writing what is being investigated, which devices and accounts are in scope, and who authorises access.<\/p><\/div>

02<\/span>

Data acquisition with integrity and custody records<\/h3>

Forensic copies of disks, phones, mailboxes and cloud accounts, with hash values and a custody log for every item.<\/p>Extraction and search<\/span><\/div>

03<\/span>

Analysis of devices, logs and relevant digital artefacts<\/h3>

Recovery of deleted files, examination of system and application logs, browser and email history, and USB or transfer activity.<\/p>Evidence triage<\/span><\/div>

04<\/span>

Timeline reconstruction and identification of indicators<\/h3>

A time-ordered account of what happened, the indicators to look for elsewhere, and a report written for the audience that has to act on it.<\/p>Event correlation<\/span><\/div><\/div><\/div><\/section>

AI use cases<\/span>

Three AI use cases, all optional<\/h2>

Optional. Every AI feature uses data you approve, can be switched off, and keeps a person in the loop.<\/p>

<\/svg>

Evidence triage<\/h3>

Sorts thousands of recovered files and messages by relevance to the questions under investigation, so analysts start with what matters.<\/p><\/div>

<\/svg>

Extraction and search<\/h3>

Finds names, numbers, documents and phrases across images, PDFs and chat exports, including in Portuguese.<\/p><\/div>

<\/svg>

Event correlation<\/h3>

Links log entries, file activity and account actions across devices into one sequence for the analyst to verify.<\/p><\/div><\/div><\/div><\/section>

When this service makes sense<\/span>

Preserve evidence. Reconstruct events. Inform decisions.<\/h2>