Group-IB Cyber Investigation Subscription

The major outcomes of our cyber investigations:

• Digital evidence collected and documented in compliance with legal requirements;
• Detection of the digital infrastructure of threat actors, including personal ones;
• Identification of digital footprints of threat actors involved in the incident (nicknames, emails, phone numbers, social network accounts);
• Identification of threat actors’ real names, professions, education, etc.

The detailed information about threat actors, as well as a thorough description of an investigative process, executive summary, and recommendations for preventing similar incidents, is reflected in a comprehensive report.

If a customer decides to proceed with a prosecution, Group-IB specialists will support the whole process including testimonies in court.

Your security is our top priority. All sensitive data is transmitted after the NDA is signed.

Each cyber investigation is approached individually. The investigative process duration may vary depending on many factors, such as the amount of information that needs to be analyzed. In general, it takes 60+ man-hours, including the following stages:

• Preliminary analysis to determine the scope of damage and evaluate chances to identify a threat actor – 4 hours+;
• Assistance in containing the cyber incident to prevent or mitigate the attack, detect exfiltrated data, and reveal more about threat actors’ findings and purposes – 8 hours+;
• Full-fledged cyber investigation to attribute the attack and compose a threat actor profile – 40 hours+;
• Post-investigation support to assist with law enforcement procedures and present testimonials in court – 8 hours+.

Group-IB Cyber Investigation team prepares reports relying on each customer’s needs. By request, we may provide you with the following documents:

• Early-stage reports for top management, board directors, and a cybersecurity team;
• Technical report with investigation results for a cybersecurity team;
• Comprehensive investigative report for law enforcement;
• Comprehensive investigative report for regulators and authorities;
• Comprehensive investigative report for top management.

Sometimes, if organizations fell victim to cybercriminals they choose to limit their actions with incident response and consequence mitigation. Adhering to this strategy may lead to long-term negative effects, such as persistent attacks on a business. Meanwhile, a full-scale cyber investigation has the following benefits:

• Opportunity to get a compensation.

  An identified threat actor can be deemed legally responsible for your financial loss and may be forced by court to compensate for the damage.

• Business reputation recovery.

  If your company conducts a cybercrime investigation, it shows the readiness to handle the consequences of a cyber incident in the most responsible way. This approach allows you to restore the business reputation among partners and clients.

• Strengthening your brand.

  Holding threat actors accountable for their actions makes you an unattractive target for attacks. In addition, it ensures your partners that you are ready to protect both your own and their interests.

• Your in-house cybersecurity team may not have all the capabilities required.

  Most companies don’t have in-house specialists with the narrow expertise needed for successful cyber investigations. Group-IB Cyber Investigation team consists of devoted and constantly evolving investigators with in-depth knowledge of cybercriminal tactics. Moreover, our team may allocate additional resources and data from our digital forensics and eDiscovery teams, CERT, and Incident Response teams.

• You may lack data and technologies to conduct cyber investigations.

  Our investigations are bolstered with Group-IB products and in-house tools for criminal detection that allow us to get insights not available to your in-house specialists.

• Your team may not have experience in complex international cyber investigations.

  Group-IB Cyber Investigations team has 19 years of experience in investigating cybercrimes worldwide. We conducted joint investigations with law enforcement agencies in 15 countries, as well as Interpol and Europol. Our knowledge is constantly evolving with new cases and the latest cybercriminal schemes.