-
Court: No Warrant Needed to Search Cell Phones
Shadow Copy Forensics!
Digital Forensics: Need an Expert?
Instant Quote: Phone Recovery Sticks
Instant Quote: Shadow Scanner
|
|
|
|
| |
|
Imediate / Emergency Services
|
|
For imediate response to frequently asked questions, be sure to VISIT THE FAQ PAGES
You may contact us directly during regular business hours at:
1.800.365.011
During regular business hours (7:30am - 4:30 pm EDT) you may call the central offices at 1.800.365.0119.
For after-hours imediate / emergency services, contact the on-call hotline at 1.317.695.3620
If you feel your computer or network is currently being comprimised by an internal or external attack and need imediate attention,
-
In NO CASE should you turn the computer off, and in NO CASE should you turn a computer that is off back on.
-
If the item in question is a computer or multiple computers connected to wired network/Internet
-
Advise your company Network Administrator, Security Team, or management
-
If it is an individual computer, upon approval from your management or I.T. staff locate and disconnect the data cable (usually a blue network cable) from the back of the computer.
Note: once data cable is disconnected (assuming not on wireless network), no data can be stolen or leave the physical computer other than by connecting additional devices to the computer.
-
If it is potentially more than one computer on a network being effected, have your network administrator disconnect either the infected segement of the network, or the main WAN link for the networks connection to the Internet.
-
Take a picture of your computer screen if you notice any unusual images or activity.
-
Do not allow any personnel other than your office network security, I.T. staff, or qualified forensic expert take any action on your computer unless they are willing to give testimony in court.
-
Contact PATCtech for further consultation
-
If the item in question is an individual or multiple computers connected to a Wireless Network
-
Advise your company Network Administrator, Security Team, or management
-
Because of the nature of wireless networks, disconnecting 1 machine may not be sufficient, therefore, upon approval and guidance by management or staff I.T. department, locate and disconnect the wireless access point associated with your computer.
-
If you have multiple access points, the best course of action is to disconnect the main wireless router or access point that feeds any additional access points or clients.
-
Do not allow any personnel other than your office network security, I.T. staff, or qualified forensic expert take any action on your computer unless they are willing to give testimony in court.
-
Contact PATCtech for further consultation
-
If the item in question is a user that has accessed inappropriate or potentially illegal materials.
-
Inform your HR representative or legal team immediately
-
If the computer is already switched off then physically isolate the computer from the network, preferably in a locked area
-
Do not allow any access to the computer.
-
Contact PATCtech for consultation on examination and reporting options.
If you are in need of immediate emergency service you may contact
our on-call representative at 1.317.695.3620
|
|
|
|
| |
|
|
|
|