Services

Incident Coordination

ThaiCERT is the Thailand National Computer Security Incident Response Team, acting as a trusted contact point to provide the coordination and necessary support between parties involved in the incidents within Thailand Internet domain. In general, the main purpose of incident coordination is to pass relevant and necessary information about an incident to all involved parties, so that they may properly handle the incidents or ultimately obtain the resolution. These parties includes the affected organizations, ISPs, relevant parties and/or other CSIRTs in the appropriate region.

Note: ThaiCERT reserves the right not to respond to your incident report if a nature of the matter is considered to be faulty or having inadequate evidence to verify the cause.

Incident Handling

TBA

Digital Forensic Service

The ThaiCERT Digital Forensic Center (DFC) provides a digital forensic examination and reporting service in compliance with current international standards and the e-Court system (to be implemented in the near future). To ensure credibility of examination reports, all examiners hold certifications from recognized international organizations including:

  • GIAC Certified Forensic Examiner (GCFE)
  • AccessData Certified Examiner (ACE)
  • AccessData Mobile Examiner (ACE)
  • EnCase Certified Examiner (EnCE)
  • Certified Forensic Computer Examiner (CFCE)

The received evidence has come in various forms, such as desktop computers, mobile phones, cloned images of server contents and hard disks taken from suspects’ computers. If requested, on-crime-scene evidence collection service is provided. The DFC performs technical examinations to assist government agencies with their law enforcement operations, which may include finding traces of system intrusion and evidence of intellectual property abuse. For complicated forensic cases, such as examinations of damaged mobile phones or deep malware behavior analyses, the DFC utilizes equipment and advanced technical specialties, such as chip-off and virtual environment emulation techniques.