Independent technical investigation of suspected unauthorised access, data exfiltration risk, and integration-layer exposure. Deliverables written for two audiences simultaneously — commercial (for decision-making) and legal (for defensibility).
Stack
Salesforce audit · OAuth & Connected App review · API access pattern analysis · Event Monitoring · Log retention forensics
Recent work
- Salesforce unauthorised-access investigation — classified a suspected breach as an existing authorised OAuth integration path, assessed exfiltration risk, and produced recommendations suitable for legal and commercial use.