Skip to content
AFRISCON
Incident in progress?
FR FrançaisEN English
Let’s discuss your project

Incident response & DFIR

Understand the incident. Contain the threat. Plan the recovery.

Digital forensics, evidence preservation and remediation support when facing a compromise.

How we help

Incident response & DFIR

  • 24/7 emergency assistance
  • Incident triage and scoping
  • Analysis of logs, systems and timelines
  • Containment, remediation and recovery recommendations
Discuss my needs

Related services

Business continuity & crisis managementDigital forensics & incident response

Scope, engagement terms and deliverables are agreed with you during an initial scoping phase.

Example: anatomy of an incident response

+212 669 605 492

Illustrative diagram of a company network: a firewall, a user workstation segment and a server segment. A workstation is compromised, the attacker moves to the file server, both machines are isolated, evidence is preserved, the systems are restored and a report is delivered.

  1. AlertCall to the 24/7 emergency line: a workstation behaves abnormally.
  2. TriageScope, impact and priorities: the attacker has moved on to a server.
  3. ContainmentThe affected machines are isolated to contain the threat.
  4. InvestigationEvidence preserved, logs and timeline analyzed.
  5. RemediationEradication, hardening and recovery of the systems.
  6. ReportDocumented findings and priority actions.

Illustrative scenario. Each engagement is scoped to your incident and environment.

Incident in progress?Report an incident

Let’s take action

Your security starts with a conversation.

Let’s discuss your project