Clear answers when a breach puts everything on the line.
HammNet provides senior-level incident response, digital forensic examination, and ransomware resilience advisory for organizations facing complex security events.
Senior-level support for the moments that matter most
Engagements are led directly, not handed off to a junior team after the sales call.
Incident Response Leadership
On-site or remote coordination of breach and ransomware response efforts.
Ransomware Readiness Assessments
Technical resilience reviews focused on Active Directory recovery and containment.
Digital Forensic Examinations
Endpoint, server, and log-based investigations.
Compromise Assessments
Proactive identification of attacker persistence and lateral movement.
Tabletop Exercises
Executive and technical scenario-based ransomware simulations.
Expert Advisory
Strategic guidance for CISOs, boards, and legal counsel during major incidents.
M&A Security Due Diligence
Post-acquisition compromise and resilience assessments.
Evidenx
Knowledge construction, not telemetry. Evidenx tests an explanation against the evidence, the alternatives, and what is missing, then keeps the reasoning visible so the person investigating reaches their own defensible conclusion.
Visit evidenx.net
Teaching a MasterClass on defensible conclusions
Jeff, together with Duncan Gardiner (co-founder of Evidenx), is delivering From Artifacts to Evidence: Building Defensible Conclusions in Incident Response at Black Hat Europe 2026 in London on 8 December. The course teaches analysts how to separate what is observed from what is inferred, corroborate findings across artifact types, and produce conclusions that hold up to scrutiny.
View course & registerApplied AI for Solo and Micro Businesses
A six-week, live-online course for solo and micro-business owners who want to build and test a real AI-assisted proof of concept for their own operational problem. No prior coding experience required, just a genuine problem worth solving.
View course detailsWhat the course covers
- Defining a real problem and a bounded project scope
- Turning domain knowledge into clear AI-ready requirements
- Effective, critical use of AI coding assistants
- Building and deploying a working prototype with version control
- Testing, debugging, and evaluating operational risk
Led directly by Jeff Hamm
HammNet provides senior-level incident response and digital forensic consulting for organizations facing complex security events. With more than 25 years of investigative experience spanning law enforcement and global cyber incident response, HammNet supports executive teams, CISOs, and technical responders during high-impact events.
HammNet UG (haftungsbeschränkt) is based in Mainz, Germany, and takes on engagements across Europe and beyond.
Get in touch
For consulting inquiries, incident response engagements, or to talk about the applied AI course or Evidenx.