Threat Detection & Response
Incident Response & Digital Forensics
Contain the attack, preserve the evidence and restore operations, with forensics that stand up to scrutiny.
Overview
When the worst happens, call a team that has seen it before.
If your organization is affected by a cybersecurity incident, CDT will detect, contain and eradicate the threat, and help you recover. Our forensic specialists collect, preserve, analyze and present digital evidence from devices, networks and data to support investigations and legal proceedings, and we help you restore normal operations while preventing the next incident.
What's included
Capabilities
Incident response
Containment, eradication and recovery led by experienced responders.
Digital forensics
Forensically sound collection and analysis of devices, networks, cloud and logs.
Evidence for legal proceedings
Chain-of-custody handling and clear reporting for counsel and investigators.
Post-incident hardening
Root-cause fixes and improved detection so it doesn't happen again.
Incident response planning
Plans, playbooks and tabletop exercises so your team is ready.
How we work
A proven, repeatable process.
-
1
Triage
We establish what happened, what is at risk and what must be preserved, starting from your first call.
-
2
Contain
We stop the spread: isolating systems and accounts without destroying the evidence you will need.
-
3
Investigate
Forensic analysis of devices, networks and logs reconstructs how the attacker got in and what they touched.
-
4
Eradicate & recover
We remove the attacker's foothold and help you restore normal operations safely.
-
5
Harden & report
A clear report for leadership, counsel and regulators, and the fixes that prevent a repeat.
Related services
Often paired with
Threat Detection & Response
Cyber Hunt
Proactive hunting for adversaries already inside your network, before they reach their objective.
Threat Detection & Response
Malware Analysis
Understand what malicious code does, where it came from and how to stop it.
Threat Detection & Response
Managed Security & Continuous Monitoring
Ongoing monitoring, vulnerability management and compliance monitoring, so your security posture never goes stale.
Let's talk
Let's talk about incident response & digital forensics.
Talk with a CDT engineer about your mission, your systems and your deadlines. We'll tell you honestly what it takes.