Digital and Computer Forensics

Computing devices, whether standard-issue laptops or the latest application-crammed smart phones, are the ubiquitous tools of the workplace, enabling employees to do business anywhere, at any time, in the most public of places — a coffee shop, hotel suite, or airport terminal.

Safeguarding Enterprise Digital Systems

Today's mobile environment makes it imperative for corporations to control their irreplaceable proprietary records and data, the lifeblood of their business operations.

In our digital workplace, an entire company's records can fit onto a $10 device no bigger than the human thumb, making it easy for thieves to steal company secrets or launch a destructive worm across a corporate intranet. The most egregious intrusions can be conducted remotely, by overseas criminals seeking to siphon funds from a bank account or shut down the power grid of a city…all in a matter of seconds.

But behind every keystroke logged, each record accessed, or any firewall breached is a trail of digital DNA, traceable through sophisticated computer and network forensics analysis. SAIC recognizes the critical need to safeguard enterprise digital systems and data and has developed a digital forensics specialty within our larger portfolio of cyber capabilities.

Computer Forensics

SAIC conducts computer forensics and digital media analysis using state-of-the-art computer software and hardware, enabling our cyber professionals to discover and extract critical content, and identify user behaviors and unique identifiers. Our rigorous processes help us assess altered or compromised systems for personnel identity theft, unauthorized access, criminal or terrorist investigations, and law enforcement support. We offer:

• Source computer system and media protection
• Data collection acquisition, and analysis
• Evidentiary chain-of-custody support
• Secure digital authentication support
• Decryption and password recovery/discovery
• Computer and network intruder profiling

Electronic Discovery (eDiscovery)

Electronic discovery has grown from a niche legal trade to a massive consulting business, as the need to ferret out information from terabytes of digital data can produce a single piece of evidence that could potentially turn the tide of a legal proceeding. SAIC's eDiscovery team, comprised of veteran lawyers, criminal investigators, recovery experts, and data forensics professionals provides:

• eDiscovery preparation
• Data collection
• Expert witness support
• Protection of original electronic information
• Media restoration
• Data processing
• Reporting and expert testimony

Human Resource Management

A company's personnel records must be protected from exposure, either accidental or intentional. Department of Health and Human Services regulations such as the Health Insurance Portability and Accountability Act (HIPAA) mandate the privacy of both employee and client personal information. We provide services specific to human resource management including:

• Onsite data collection and recovery for potential legal actions
• Network/workstation audits
• Security investigations
• Email recovery and analysis; password-cracking
• Expert witness testimony and support

Network Intrusion, Detection, and Prevention

Criminals, disgruntled employees, competitors, and hostile state-sponsored and independent actors often target the intranets of companies, educational institutions, and governmental organizations. SAIC has developed a complete methodology that thoroughly investigates these types of intrusions and uncovers each step of the attack to understand the immediate impact to vital digital resources. We provide:

• Incident response and handling
• Computer forensics and malware analysis
• Live media and memory analysis
• Comprehensive cyber defense training through CyberNEXS solutions

Incident Response and Handling

Cyber criminals launch attacks at unexpected times, often during non-business hours, in an attempt to maximize their potential success or damage. SAIC's incident response service responds to threats on a 24x7 basis and can rapidly dispatch a quick-reaction team of experts to a client's site. We respond to:

• White collar crime (fraud, accounting irregularities, theft)
• Malware infection response; Internet abuse
• Intrusion detection, espionage
• Disaster recovery