Twenty years of evidence.

Digital forensics is the scientific process of identifying, preserving, analysing and presenting electronic evidence in a legally admissible manner. It covers computers, mobile devices, networks and cloud environments. Sherlock Forensics has provided court-admissible digital forensic examinations in British Columbia since approximately 2004. For authoritative standards, see NIST SP 800-86.

Incident response costs vary based on scope, severity and duration. Retainer clients get pre-negotiated rates and priority SLAs. Non-retainer engagements are quoted after initial triage. Contact us at 604.229.1994 for a confidential consultation. Pricing is discussed directly because every engagement is different.

If digital evidence is relevant to your case, a certified forensic examiner ensures that evidence is collected, preserved and analyzed using methods that hold up in court. Our examiners are CISSP certified with EnCase and FTK training and have provided expert witness testimony in courts across British Columbia and Newfoundland.

Our examiners are CISSP (Certified Information Systems Security Professional) certified, with training in EnCase and FTK (Forensic Toolkit) software. This credential is maintained through continuous professional development and validated under cross-examination. See (ISC)² for certification details.

Yes. We provide AI-generated deepfake detection for legal proceedings, encrypted memory forensics for post-quantum environments and security assessments for AI startups. As AI-generated evidence becomes more common in court, detecting synthetic media is a growing area of our practice.

Yes. We perform security assessments on AI/ML systems including LLM-powered applications, model APIs, inference endpoints and AI supply chains. Testing covers prompt injection attacks, training data poisoning, model extraction, adversarial inputs and API abuse scenarios. If you're building or deploying AI, we test it the way an attacker would.

Prompt injection is an attack against large language model (LLM) applications where malicious input manipulates the model into ignoring its instructions, leaking system prompts, exfiltrating data or performing unauthorized actions. It's the SQL injection of the AI era. Our testing covers both direct injection (user input) and indirect injection (embedded in data the LLM processes). See OWASP Top 10 for LLMs for the full threat taxonomy.

Absolutely - and you should. Investors increasingly require evidence of security posture before committing capital. Our AI startup security audit covers your model API security, data pipeline integrity, prompt injection resilience, infrastructure hardening and compliance readiness. You receive a report that demonstrates due diligence to investors, board members and future enterprise customers. Most audits complete within 5-10 business days.