Pen Test Partners' Incident Response service is a Digital Forensic Incident Response (DFIR) offering delivered by a CREST-accredited team. It is designed to assist organisations that have experienced or suspect a cyber breach, providing structured investigation, containment, and recovery support. The service follows a modular framework covering the full intrusion and software/data lifecycle. It begins with an initial assessment to determine the scope and impact of an incident, followed by containment and eradication of threats, and identification of ingress points and Indicators of Compromise (IoCs). Key investigation modules include: - Root cause and impact assessment - Business email compromise (BEC) investigation - Data exfiltration investigation - Mobile device forensics - Data recovery from damaged or compromised devices - Forensic analysis (truncated in source) Upon completion, clients receive a detailed incident report, an incident timeline, identified attacker ingress methods, a list of IoCs for ongoing monitoring, and tailored strategic recommendations to prevent future incidents. The service accommodates organisations at any cyber maturity level and is structured to support business continuity throughout the response process. Bespoke defence strategies and security enhancement recommendations based on industry standards are also provided as part of the engagement.