Securing digital evidence from computers, media and cloud-based systems both on-site and remotely • Forensic examination of evidence, recovery of deleted data • Chronological analysis of computer activity such as copying files and likelihood of exfiltration • Production of exhibits for court use • Data provenance • Email analysis • Cybercrime such as ransomware, email and system compromises • Data analytics • Electronic discovery