Amped
Image- and video-forensics tooling — Amped Authenticate for media authentication and Amped FIVE for clarification and enhancement. We use Amped on investigations where photographic or video evidence is contested.
DataExpert is deliberately vendor-agnostic — but no investigations firm operates in isolation. The partners on this page are the technology vendors, recovery specialists, in-house disciplines, and corporate partners whose work intersects with ours regularly enough that we want to be transparent about the relationship.
We hold practitioner certifications across the major forensics, OSINT, and cryptocurrency-intelligence platforms used in the EU market. The vendors below are partners whose tooling we deploy regularly — and whose limitations we are equally happy to discuss with clients when a different tool fits a given case better.
Image- and video-forensics tooling — Amped Authenticate for media authentication and Amped FIVE for clarification and enhancement. We use Amped on investigations where photographic or video evidence is contested.
The leading mobile-device-forensics platform — UFED, Physical Analyzer, and Premium. Our mobile-forensics practitioners hold current Cellebrite certifications and run a fully equipped acquisition lab in the Netherlands.
Cryptocurrency-tracing platform built around Reactor. We are a Chainalysis partner and our investigators are certified to run tracing investigations across the chains Reactor supports.
Search and security-analytics platform. We use Elastic in detection-engineering and security-operations engagements where structured log search and observability are the right primary tools.
eDiscovery and forensic-investigation suite, including the former FTK product line. We use Exterro tooling for large-scale enterprise investigations and legal-hold workflows.
Link-analysis and OSINT graph-investigation platform. Used across our OSINT practice and as a connective layer between cryptocurrency-tracing findings and off-chain identity work.
Digital-evidence acquisition and analysis — most notably Magnet AXIOM. We use AXIOM alongside EnCase and Cellebrite, picking the right tool per case rather than committing to one stack.
EnCase Forensic and EnCase eDiscovery — long-established forensics platforms widely used by law-enforcement and regulated enterprise. DataExpert supports Dutch National Police on EnCase, among other engagements.
Mobile and cloud forensics — particularly strong on certain device classes and on cloud-account acquisition. We use Oxygen alongside Cellebrite as part of our mobile-forensics toolkit.
Cryptocurrency-intelligence platform used for tracing, sanctions exposure, and risk scoring. We are a TRM Labs partner and our investigators are certified to run TRM-based investigations across the chains the platform supports.
Some investigations begin with damaged, encrypted, or end-of-life media — failed drives, water-damaged devices, decommissioned servers. DataExpert works with specialist data-recovery and IT-asset-disposition partners so that media which has reached the end of its operational life can still yield evidence, or be retired securely in line with regulatory and data-protection requirements. Where a recovery effort is needed before forensic analysis can begin, we coordinate that work and integrate the recovered data back into the main investigation case file.
Our in-house forensics practice is the backbone of DataExpert. The same team that designs detection content, runs incident response, and trains Academy students also runs our forensics lab in Veenendaal. That integration matters: when an MDR engagement escalates into an incident, when an identity-management case turns into a credential-abuse investigation, when a GRC engagement runs into a real finding — there is no handoff. The practitioners are already on staff, the chain-of-custody discipline is already in place, and the case file is already structured to hold formal evidence.
[FILL IN: M&A partner details — name of partner organisation, nature of the partnership, what kind of engagements it covers, and how clients can be referred between firms.] We will populate this section once the partnership detail is finalised; the placeholder is here so the page architecture is complete.
Whether you are a vendor, a recovery specialist, or an advisory firm with complementary work, we are open to conversations.
or call +31 (0)318 543173