Cyber Security
Incident Response & Digital Forensics
Rapid containment, eradication and recovery after a security incident, with forensic root-cause analysis and evidence handled for legal and regulatory needs.
Overview
When something goes wrong we contain it fast, find out exactly what happened and help you recover and report it properly.
What you get
- Containment and eradication actions
- Forensic timeline and root-cause analysis
- Evidence preserved with chain of custody
- Post-incident report and hardening plan
How we work
- 01Triage and containment
- 02Evidence collection and forensic analysis
- 03Eradication and recovery
- 04Lessons learned and prevention plan
More Cyber Security services
- Security Architecture & Risk AssessmentGap analysis against NIST CSF or ISO/IEC 27001 controls, a prioritised risk register and a security roadmap leadership can fund.
- Server & Infrastructure HardeningLinux and Windows servers hardened to CIS Benchmarks: least-privilege access, SSH and TLS configuration, firewalling, logging and patch baselines.
- Cloud Security Posture ManagementIAM least-privilege review, misconfiguration remediation and continuous posture monitoring across AWS, Azure and GCP against CIS cloud benchmarks.
- Managed Detection & ResponseSIEM/XDR monitoring with 24/7 alert triage, threat hunting and guided response, built on Wazuh or Elastic and mapped to MITRE ATT&CK.
- Vulnerability Management ProgrammeContinuous authenticated scanning, prioritisation by CVSS and EPSS exploitability, and patch SLAs tracked to closure across your estate.
- Compliance ReadinessReadiness support for ISO/IEC 27001, SOC 2, PCI DSS and the Kenya Data Protection Act: gap analysis, policies, technical controls and audit preparation.
Have a project to scope?
Tell us your objectives and constraints. We reply within one business day.