Almost every dispute today has digital evidence at its centre. The examination reads that evidence with a technical eye and with an eye on the proceedings in which it will be used.
Practically every case handled by Adriano Vallim passes through digital law. The trace is in an e-mail, a phone, a system, a cloud account or the company network. The trace is technical. The use made of it is legal.
That is why the work does not stop at saying what the trace shows. It considers how the evidence will be used: what the lawyer needs to demonstrate and what the opposing party will challenge. And which measure fits each moment: early production of evidence, search and seizure or a request for records from the provider. A purely technical reading can be right and arrive too late.
The strategy remains the lawyer's, and the expert report says only what the evidence supports, for or against. For lawyers and compliance teams, there is also technical consulting in Digital Law, to conduct technology cases without losing the evidence through lack of technical knowledge. It is not offered to individuals.
Computers, servers, phones and e-mail: preservation with hash, recovery of deleted data, timeline and authorship. It is the method that underpins the other units.
From the IP address in the log to the holder of the connection. The examination grounds the technical part of the disclosure request and cross-checks what the provider returns with the events of the case.
Intrusion through the administrator account in Microsoft 365, Microsoft Entra ID or Active Directory, MFA bypass and misuse of AWS, Azure or Google Cloud.
Copied source code, trade secrets taken to a competitor, diverted customer base and trade dress. When the subject is technology, intellectual property is also proved with digital traces.
Systems that do not work, delay, scope and termination. The examination reads the repository, the database and the test environment.
Incidents involving personal data, expert reports for notification to the ANPD and examination of what websites and apps collect. Includes the immediate preservation actions when there is a breach.
Two cases in which the technical reading decided the course of the proceedings. The case of the evidence forged in the browser, where the fraud was the accuser's, is in Forensic Services in Public Procurement and Infrastructure.
A civil action accused a company's website of sharing users' personal data without consent. The examination looked at the code executed and the traffic with the live site, and audited the other party's evidence: a copy of the site made with tools that alter the code. The opinion showed there had been no violation. The case was closed without a court-ordered examination, and the company avoided a high-value judgment.
A small computer with a 4G modem, hidden in a company's network, had scanned more than a thousand machines and accessed shared folders. The remote access keys and the Wi-Fi networks configured on the device, together with the examination of the modem's SIM card, pointed to the author. The expert report also recorded that fingerprints were lost because IT handled the device first. The full version is in Digital Counter-Espionage.
See also
Computer Forensics and Digital Investigation → Digital Authorship and Subscriber Data Disclosure → Cloud, Identity and DevOps Forensics → Intellectual Property, Trade Secrets and Unfair Competition → Software and Development Project Forensics → LGPD, ANPD and Data Breach Forensics → Digital Counter-Espionage → For Lawyers → Practice Areas →