Core Capabilities
Booz Allen’s Digital Forensics and Incident Response (DFIR) team works with a wide array of organizations globally to identify, contain, eradicate, and investigate actual or suspected cybersecurity intrusions. Through our ability to rapidly deploy highly experienced personnel, we help minimize business disruption by leveraging capabilities that span the entire incident response lifecycle.
- Digital Forensic Investigations
- Cloud Compromise Investigations
- Ransomware Recovery Assistance
- Insider Threat Investigations
- Malware Events
- Network Intrusions
- Mobile Device Forensics
- Compromise Assessments
- Data Mining & Manual Review
- Onsite and/or Remote Incident Containment Assistance
- Onsite and/or Remote Remediation & Recovery Assistance
- Emergency Staff Augmentation Support
- Threat Intelligence Operations
- Pre-Paid Incident Response Retainer Services
- Continuous Cybersecurity Testing & Assessments
- Tabletop Exercises and Wargaming
