Support Mon–Fri · 8 am–6 pm (BRT) Could you be a scam target? 3-min check PTEN
CiBERDETETiVE InvestigationFraudCyber
SCAM ALERT Be wary of urgent PIX requests, even from people you know.

NEWEvidence Preservation

Digital evidence that hold up in court.

An forensic process to collect and preserve chats, emails, websites and devices, with hashing, chain of custody and a technical report.

12types of digital evidence we preserve
10documented steps in the chain of custody
ISO/IEC 27037as the reference for collection and preservation
cd://preservation · chain of custodyILLUSTRATIVE SIMULATION
SOURCEDAY 1DAY 2DAY 3DAY 4
Phishing and social engineering
Technical findings
WhatsApp chats
Emails and attachments
Websites and profiles
…Scope and legal basis recorded
COLLECTION COMPLETE 0% 0 of 5 sources completed

What it is

Digital evidence with proven integrity, source and date.

A screenshot on its own is easy to challenge. Evidence preservation uses forensic techniques to collect chats, emails, websites, profiles and files, record their integrity with hashes and document every step in the chain of custody, so the evidence holds up in court.

Scope

We define what needs to be preserved, from where and for what legal purpose.

Preservation

Forensic collection with hashing, a record of date, time and source, and a documented chain of custody.

Findings

A clear technical report, ready for lawyers, experts and the court.

When to reach out

Your evidence needs to be preserved when you hear this

We serve companies, law firms and individuals. If you recognize any of these situations, preserve the evidence before it disappears.

What we deliver

Inside a forensic collection

See what happens at each stage and what you receive.

DURING COLLECTION, THE SPECIALIST

  • Capture of chats, emails, websites and profiles
  • Record of the date, time and source of each item
  • Hash calculated for every file
You receive: Collection record
CASE DASHBOARDillustrative example
Items collected7 of 9
Analysis completed68%
Hashes verified96%
Items documented12 of 15
Evidence strength3,4 / 5

What changes in practice

From a contestable screenshot to evidence that holds up.

Your own screenshotsWith forensic preservation
INTEGRITYNo way to prove nothing was alteredA hash recorded for every file
SOURCENo proven date, time or sourceDate, time, URL and source recorded
CUSTODYNo one knows where the evidence has beenDocumented chain of custody
CONTENTCrops that lose the contextComplete chats, with metadata
IN COURTEasy to challengeA technical report that holds up

How it works

From collection to court.

  1. PHASE 1

    Assessment

    We understand the case, what needs to be preserved and the legal purpose.

  2. PHASE 2

    Forensic collection

    We capture the evidence with hashing and a record of date, time and source.

  3. PHASE 3

    Custody and analysis

    We document the chain of custody and analyze metadata and the timeline.

  4. PHASE 4

    Report

    We deliver the technical report and support the lawyer in court.

Engagement models

From urgent collection to full support in court.

Pricing on request, based on scope and complexity.

URGENT COLLECTION

To preserve it before it disappears

  • Collection of chats, websites and profiles
  • Forensic collection with hashing
  • Hashing and chain of custody
  • Collection record
Request a proposal
MOST COMPLETE

FULL PRESERVATION

Evidence ready for court

  • Everything in Urgent collection
  • Metadata and timeline analysis
  • Technical report
  • Legal review with our Chief Legal Officer
  • Support for the lawyer in court
Request a proposal

ON DEMAND

For law firms and companies

  • Forensic analysis of devices
  • Technical support for notarial records
  • Analysis of evidence already collected
  • Technical clarifications
Request a proposal
Felippe Britto

Who leads the collection

Felippe Britto

CISO · graduate studies in Cyber Forensics · 28 years of experience

Experience leading security and incident response in critical operations, with graduate studies in Cyber Forensics. He runs collection with forensic method, alongside our Chief Legal Officer, to ensure the evidence is legally sound.

Read the full bio →

FAQ

Questions about evidence preservation

It can, but it is easy to challenge: it proves neither the date, the source nor the integrity. Forensic preservation records these elements and documents the chain of custody, which makes the evidence far stronger.

The CiBER DETETiVE ecosystem

One team to investigate and protect

All 8 practice areas work together, with the same team and the same standard of confidentiality. Combine the ones your case needs.

Tell us your case

Preserve the evidence before it disappears.

Tell us your case. In a confidential conversation, we will show you what needs to be preserved first.

Open a request WhatsApp