Cyber investigation

Digital evidence: collect without altering

A deleted message, an edited post, an overwritten log: digital evidence is fragile. The right method is to freeze it, authenticate it and document it before it disappears.

Call (+33) 07 53 18 32 04Contact

Why method matters as much as content

A plain screenshot is easy to contest: it may have been edited, its date cannot be verified, its origin is uncertain. Solid digital evidence rests on three qualities: authenticity, integrity and traceability — knowing where it comes from, proving it was not altered, and documenting who handled it.

What we put in place

  • Complete, time-stamped captures

    Web pages, posts, conversations, with address, collection date and time.

  • Cryptographic hashes

    Each file gets a hash (SHA-256): any later modification is detectable.

  • Working copies

    We analyse copies and keep the original intact, never altering the source.

  • Chain-of-custody log

    Who collected what, when, how and where it is stored: everything is recorded.

  • Encrypted storage

    Items are stored encrypted with restricted access.

  • Readable export

    An organised file that a lawyer, insurer or the authorities can use.

Types of items we handle

  • Web pages and social media posts
  • E-mails, with their technical headers
  • Chat conversations and exchanged files
  • Server, router or application connection logs
  • Contents of a computer or phone (with the owner's consent)
  • Transaction histories and digital receipts

What to do if you are a victim

  1. Do not reply and do not delete anything.
  2. Note the date and time of every event.
  3. Call us before trying to « clean » a device: it could erase traces.
  4. Keep originals (e-mails in their original format, files, proofs of payment).

Our guide online scams: the ten first moves details the process step by step.

Frequently asked questions

Is a screenshot enough as evidence?

It is a start, but easy to challenge. It is better to add a complete collection (address, time-stamp, file hash) or even a bailiff's report for important content.

Can you recover deleted messages?

Sometimes, depending on the device, the app and the time elapsed. The faster you act and the less you use the device, the better the odds. No result can be guaranteed.

Is my data kept confidential?

Yes. Items are stored encrypted with restricted access, and we maintain strict client anonymity.

Also worth a look

A project, an emergency? Let's talk.

Call us: we answer 24/7.

Call (+33) 07 53 18 32 04

Available 24/7

Call (+33) 07 53 18 32 04