Investigating a suspected server compromise
The problem
A local business reported unauthorized access, malware, and data theft. Police needed technical forensic support.
Context and constraints
Work with the Ahmedabad Police Department. Client name withheld.
Investigation or engineering approach
I reviewed logs and host evidence, reverse-engineered malware, traced network paths, and recovered deleted artifacts where possible.
My contribution
Technical forensic analysis supporting the police investigation. Arrests and prosecution were law-enforcement decisions.
Outcome (publicly verifiable)
Malware family and entry points identified; critical data recovered. The business resumed operations with stronger endpoint controls.