Cyber Forensic
Digital Evidence Acquisition, Analysis & Reporting
Digital Forensics focuses on identifying, acquiring, processing, analyzing, and reporting on data stored on computers, mobile devices, servers, DVR/CCTV systems, and cloud platforms. The goal is to extract relevant data, transform it into actionable intelligence, and present findings in a legally admissible manner with full chain-of-custody.
Division Scope
Evidence imaging and preservation, cloud & mobile extraction, timeline reconstruction, malware & log analysis, and courtroom-ready reporting.
Division & Subject Head :
Shri.V.S.Pawade
Designation :
Deputy Director
Email :
vishal.pawade24@mah.gov.in
Phone :
91 97731 83454
Areas of Cyber Forensics
Computer Forensics
Disk imaging, filesystem recovery, artifact & log analysis.
Mobile & IoT
Handset, SIM, cloud backups, wearables, and smart devices.
Cloud & Network
Cloud tokens/sessions, logs, traffic captures, and intrusion traces.
DVR/CCTV
Video extraction, format conversion, frame-level authentication.
Malware & Incident
Binary triage, persistence discovery, timeline & lateral movement.
E-Discovery & Reporting
Search, deduplication, review sets, and court-ready documentation.
Tools by Workflow Stage
Forensic Imaging
Write blockers, hashing, and bit-by-bit acquisitions.
Extraction & Analysis
File system, memory, artifacts, and timeline reconstruction.
Cloud Extraction
Token/session-based access and authenticated pull of cloud data.
Examination Workflow
Intake & Preservation
Unique IDs, seal checks, imaging & hashing to protect integrity.
Triage & Parsing
Rapid artifact extraction (logs, registry, chats, media, app data).
Deep Analysis
Timeline, correlation across sources, attribution & reconstruction.
Reporting
Clear, court-ready outputs with method references & uncertainty statements.
Court Support
Expert testimony and demonstratives for clear interpretation.
Chain-of-Custody
Logged transfers and tamper-evident storage across lifecycle.