Services
Computer, Cloud & Collaboration Data
Focused acquisition and analysis across computers, storage, email, cloud repositories, and collaboration platforms.
Connect endpoint activity with the systems around it.
Important evidence rarely lives in one place. A computer may contain local files, browser history, sync records, application artifacts, removable-media activity, and traces of cloud or collaboration use. Cloud systems may hold the more complete content, audit history, version information, or administrative records. TIERS Group helps clients identify the right sources and collect them in a controlled, proportionate way.
Computers
Endpoint forensics
Windows, macOS, Linux, user profiles, file systems, external storage, browsers, applications, system records, and deleted-data assessment.
Email & cloud
Cloud repositories
Authorized exports, mailbox content, file repositories, version histories, audit records, sharing, and synchronization context.
Collaboration
Messaging platforms
Structured collection and review planning for chats, channels, direct messages, attachments, reactions, participants, and related metadata.
Cross-source
Correlation
Compare local activity, cloud records, access logs, file versions, communications, and timelines to test competing explanations.
Collection should match the question.
Broad “collect everything” requests can increase cost, privilege exposure, privacy impact, and review burden without improving the answer. We work with counsel or the authorized client to identify relevant custodians, accounts, systems, date ranges, file types, channels, and preservation needs before acquisition.
Examples of focused work
- Preserve a defined set of mailboxes, folders, channels, or cloud locations
- Determine whether a file was created, copied, accessed, modified, synchronized, or transferred
- Assess use of external storage, personal cloud accounts, browser services, or collaboration tools
- Compare a produced data set against expected source records or metadata
- Identify material gaps, unsupported conclusions, or collection limitations
- Prepare responsive data for processing and review while maintaining source traceability