Post-Incident Forensic Engagement — Max Technologies

Independent forensic investigation engagement following incident containment. Uses Falcon Forensics for deep historical data collection across the affected environment. Produces defensible findings written to standards suitable for cyber insurance claims, regulatory disclosure (PIPEDA, provincial PIPAs), and legal proceedings. Typically required when an incident has implications for insurance recovery, regulatory notification, or potential litigation.

• Forensic report documenting scope, methodology, and findings suitable for insurance carriers and legal counsel
• Timeline reconstruction of attacker activity from initial access through containment
• Root cause analysis identifying the entry point, persistence mechanisms, and lateral movement path
• Recommendations for control improvements to address gaps exposed by the incident
• Falcon Forensics deep historical data collection across the affected environment

Delivered by a CrowdStrike Services Partner founded by a former early CrowdStrike employee. As an authorized AWS Marketplace seller, Max Technologies enables frictionless procurement through your existing AWS committed spend (EDP).

• Duration: 4-12 weeks
• Engagement model: Fixed scope
• Pricing: starts at $95,000 USD (final price via private offer)