LB Detektive GmbH, with its specialized LB Forensics division, operates nationwide and, in suitable cases, internationally. Our digital forensics services support private individuals, companies, lawyers, and other clients in the professional securing, investigation, and expert evaluation of digital data and evidence.

Whether there is suspicion of unauthorized access to a smartphone, possible spyware, deleted messages, anomalies in a computer, or the potential leakage of confidential company data: The process begins with a technically sound and unbiased investigation. In doing so, we not only examine individual anomalies but also place relevant digital artifacts within their technical and temporal context.

Our services include smartphone forensics, computer forensics , the examination of hard drives, SSDs and other data storage devices, digital evidence preservation, and the analysis of IT and cyber incidents. Depending on the circumstances, we examine individual devices or combine information from multiple relevant data sources.

Certified quality and expert competence

LB Detektive GmbH has a quality management system certified by TÜV NORD CERT according to DIN EN ISO 9001:2015. The certified scope includes, among other things, IT forensics . Defined processes, documented procedures, and continuous quality assurance thus form a solid organizational framework for our work.

In addition, expert competence is offered through personal certification according to DIN EN ISO/IEC 17024. This personal certification is distinct from the certification of the quality management system according to DIN EN ISO 9001. Together, both areas combine organizational quality processes with expert technical competence.

However, certification neither replaces a thorough investigation nor does it guarantee a specific outcome. Especially in digital forensics, the validity of findings depends on which data are actually available and technically accessible. Therefore, we document investigation steps transparently and separate verifiable technical facts from interpretations and conclusions.

IT forensics for private individuals

A significant part of our forensic work involves private matters. Smartphones, computers, and user accounts now contain large portions of personal communication and a wealth of information about digital activities. Accordingly, a professional investigation can be crucial when there are specific anomalies or a plausible suspicion.

Typical questions include, for example, possible unauthorized access to a smartphone or computer, suspected spyware or stalkerware, unknown account activity, deleted WhatsApp messages, missing photos and files, or digital irregularities after a separation. Phishing, smishing, online fraud, or securing digital information for legal disputes can also be grounds for an investigation.

An objective assessment is particularly important. For example, increased battery consumption does not prove surveillance. Similarly, an unknown login does not automatically reveal the actual user. Therefore, we examine the available technical traces impartially and only evaluate what can be verifiably determined from the data.

IT forensics for companies, law firms and organizations

In a business context, different issues often take center stage. Potential data theft, internal incidents, suspicious file activity, compromised user accounts, deleted company data, or a specific cyber incident may necessitate a structured forensic investigation.

Depending on the circumstances, we include desktop computers, laptops, smartphones, hard drives, SSDs, USB storage devices, and other relevant data sources in our investigation. A single piece of technical evidence is often insufficient for a reliable assessment. For example, simply connecting a USB storage device does not prove that confidential files were copied. Only the correlation of various traces can reveal the actual sequence of events more accurately.

Lawyers can also use digital investigations when technical issues become relevant to civil, labor, or criminal disputes. In such cases, we pay particular attention to verifiable data storage, clear documentation, and the separation of technical findings and legal assessment.

Professional tools for various forensic tasks

Digital forensics requires different investigative methods. A modern smartphone has different technical requirements than a Windows PC, Mac, SSD, or external storage device. Therefore, we use specialized forensic tools depending on the subject of the investigation.

These include Cellebrite Inseyets for mobile digital data, Cellebrite Digital Collector for forensic data acquisition from computer systems and storage media, and Cellebrite Inspector for advanced analysis of computer and system data. X-Ways Forensics also enables in-depth investigations of file systems, partitions, and storage media structures. For mobile investigations, MOBILedit Forensic and MEFF 3 Pro, among others, complement the available tool portfolio.

The software used is always just a tool. Automatically generated results do not replace expert evaluation. What remains crucial is which data could be secured, how individual artifacts relate to one another, and what conclusions can actually be drawn from the available data.

IT forensics nationwide – our areas of operation

Digital evidence can originate regardless of location. Therefore, we support clients throughout Germany with forensic investigations. Whether it's a smartphone, computer, hard drive, SSD, or a complex IT incident: the approach depends on the subject of the investigation, the technical situation, and the specific questions being asked.

Depending on the case, we coordinate the handover of the testing equipment, organize necessary security measures, or coordinate more extensive forensic investigations. This allows us to handle both individual private investigations and complex corporate cases nationwide.

We have already published dedicated regional pages for IT forensics in numerous cities. There you will find further information about our services and typical investigation scenarios in the respective region. Even if there isn't yet a dedicated page for your place of residence, business, or work location, you can still utilize our forensic services nationwide.

Below is a comprehensive overview of our areas of operation in Germany: