Digital evidence recovery and analysis from devices, networks, and storage media for cybercrime and data breach cases. Commissioned by IT security firms, law enforcement, and enterprises to support legal actions and incident response.