Litigation Support
Cyber Forensics Expertise for Internal and External Counsel During the Litigation Process
You may face the prospect of legal action when digital evidence must be interpreted. Mandiant litigation support services provides digital forensics expertise to internal and external counsel prior to and during the litigation process.
Overview
We serve as expert witnesses in court. We apply our technical skills to determine what the electronic evidence shows. We may support clients in court, help them prepare for litigation involving electronically stored information (ESI), or provide cyber forensics for use during sensitive internal inquiries. We are often asked to double check work performed by other firms to ensure the technical integrity of the conclusions.
Evidence Preparation
Our consultants work with legal counsel in non-technical areas such as preservation order development, discovery request generation, and deposition support. We have extensive experience providing advice, guidance, and project management to clients and counsel on the production and analysis of electronic evidence.
Analysis
We can perform challenging computer forensics as needed, depending on the nature of the evidence as well as the objectives of counsel. We can conduct a variety of technical activities associated with the examination and processing of ESI.
Testimony
When matters go to court we can provide expert witness testimony in criminal and civil proceedings. We have provided testimony in civil cases for both prosecution and defense counsel, and for the prosecution in criminal proceedings.
What You Get
- Unsurpassed Technical Skills
- Management Experience
- Civil and Criminal Experience
- Evidence Handling and Storage
- Professional Computer Forensic Lab
Build a Business Case
M-Trends® 2015: A View from the Front Lines
This report reveals key insights, statistics and case studies illustrating how the tools and tactics of advanced persistent threat (APT) actors have evolved over the last year.
Read the Report"...the central narrative stayed the same: far too many organizations were unprepared for the inevitable breach, allowing attackers to linger far too long in compromised environments."
- M-Trends 2015
Our Approach
Our consultants can perform various types of litigation support: directly for clients, through their legal representatives, or for government agencies. Our approach entails overseeing communications and project management to keep the appropriate parties informed. This allows legal counsel to focus their energy on their cases.
We adapt our methodology with the following offerings to suit each case:
Evidence Scoping and Direction Setting
We can play a large role in helping an organization understand the overall electronic evidence discovery process, the types of information that may be available for analysis, what approaches are most efficient, and what legal documents are required to preserve evidence.
Examination, Filtering, and Data Minimization
We can help reduce the time and cost of the production and review process by performing a thorough review of collected media to understand where relevant email, attachments, documents, or evidence reside. This includes identifying and producing file stores such as compressed files, encrypted partitions, and virtual systems.
Analysis
Throughout the litigation support process, we often need to perform challenging digital forensics, which is our greatest strength. The goal of electronic evidence discovery is to identify information that will corroborate or discredit a claim. Sometimes it requires creativity and advanced technical knowledge to identify that evidence.
Evidence Collection
We acquire electronic media so that it can be effectively analyzed. Services range from the forensic duplication of a single piece of media to extensive data collection across multiple physical locations. Our consultants can even collect evidence from systems that cannot be taken offline during the evidence collection process.
Production
We generate evidence for review by identifying attorney/client privileged information and redacting it based on jointly agreed upon criteria. Our consultants have generated files for review from deleted, slack, or unallocated space and performed analysis of proprietary application files that require interpretation.