Establish the facts
Reconstruct the timeline and responsibilities: what happened, how, with what impact, based on verifiable material, not assumptions.
Resource · Forensics
Forensics explained simply: establishing the facts, in order to prove and decide.
People often talk about “forensics” without knowing what it covers. Put simply: it means reconstructing what happened from the traces left on systems, in a rigorous and documented way. Not repair, but establishing evidence.
First conversation free, confidential and with no commitment.
Subject of the analysis
Fraudulent access · email
Collection
intact traces
Analysis
timeline
Reporting
clear file
Timestamped register
Every step traced →
01 · WHAT WE ARE TALKING ABOUT
Forensics, or digital investigation: understanding what happened
Forensics means reconstructing the facts of an incident from the traces left on systems, in a rigorous and documented way. It is not “repair”: it is establishing evidence. It is used after an intrusion, a fraud, a data leak, identity theft or a dispute, whenever understanding exactly what happened, or being able to prove it, becomes decisive.
Preserve the evidence
Collect and preserve the material before it disappears, without altering it. The traceability of each step is what gives the result its value.
Inform the decision
Deliver a file that management, a lawyer, an insurer or an authority can understand. The aim is not to drown people in technical detail: it is to shed light.
02 · THE METHOD
Four stages, in the right order
The work follows four steps. The rigour of each one determines the strength of the whole: badly collected evidence cannot be recovered.
01CollectGather the material without altering it, at the source.
02PreserveProtect the integrity of the data, with every handling traced.
03AnalyseReconstruct the timeline and responsibilities.
04ReportClear conclusions that non-technical people can use.
03 · WHAT IT IS FOR
A file that speaks to those who decide what happens next
What forensics produces only has value if it can be used where your case actually moves forward: with your bank, your insurer or the courts.
For your bank
Document the fraud or fraudulent access with established facts: in a refund claim, a well-supported file carries more weight than a statement.
For your insurer
Provide the timeline and impacts required to process a cyber insurance claim. The timestamped thread of facts supports the conversation with the insurer.
For the courts
Build a factual basis for a complaint or a dispute. The rigour of the collection and its traceability determine what can be relied on against the other party.
04 · TWO COMPLEMENTARY DISCIPLINES
Forensics and incident response: not to be confused
The two complement each other, but they do not pursue the same goal. Confusing them means risking sacrificing the evidence to move fast, or the other way round.
Incident response
Take back control
Stabilise the situation, contain the threat, restore operations. Urgency is in charge: you act to stop the bleeding.
- Goal: get back to normal
- Pace: urgency, the first hours
- Risk: acting too fast can erase traces
Forensics
Establish the facts
Understand and prove what happened, with method and traceability. Preserve first, document second.
- Goal: prove and inform the decision
- Pace: rigour before speed
- Value: a usable, timestamped file
The Galyct firm brings these two dimensions together and, where needed, coordinates all the parties to a sensitive case.
An incident in progress? Don’t destroy the evidence.
Don’t face it alone. Don’t delete anything, don’t pay anything, and don’t give in to haste: badly preserved evidence is worthless, and some moves cannot be undone. Describe the situation to us and we will make the first decisions with you. And we never ask for your codes.
No result guaranteed.
Forensics establishes facts: it does not promise an outcome. Depending on the traces available, it can prove a lot, a little, or sometimes only what remains. We tell you what it is realistic to expect (without dramatising, without overpromising) and we never ask for your passwords.
A doubt, or a sensitive case? Let’s talk.
Evidence, forensics or crisis: the Galyct firm takes on the case directly. A first conversation about your situation, with no commitment and no sales pitch.