Closing knowledge gaps in cyber investigations.
Cyber Knowledge Engineering Ltd (CKE) is the specialist knowledge company for cyber investigations. We codify the validated expertise of practitioners across security operations, incident response, and digital forensics into structured, semantic knowledge resources.
“For over a century, systematic knowledge sharing and harmonisation of practices have been the foundation of forensic investigation. Future efficacy of cyber investigations depends on this same foundation operating at speed and scale. Every novel problem solved without sharing what was learned in machine-readable form perpetuates a knowledge gap into every future case that meets the same problem. Every case handled in isolation — against only the knowledge in one person’s head — has something the collective knowledge of the profession would have caught. These knowledge gaps create cascading costs, including time waste, backlogs, inadmissible evidence, flawed analysis, and wrongful outcomes. Closing these gaps requires systematic solutions that let cyber investigation keep pace with technology while continuously improving quality.”
Eoghan Casey, Chief Knowledge Officer
CKE is building capabilities that enhance cyber investigations with accessible, accurate and reliable knowledge, applied automatically at critical junctures in the investigative process.
Our Approach
Accurate and Reliable
These are not optional in cyber investigations. At CKE our solutions are developed with accuracy and reliability as non-negotiable requirements.
Before any solution is published to a client, it must undergo thorough and rigorous testing against exceptional performance standards. We’re experienced investigators, and we don’t publish tools unless we would use them ourselves.
Human Centered
Modern technology is driving trends to automate increasingly higher portions of our technical work. In cyber investigations we cannot replace the investigator with automation. If you’re a forensic examiner, AI doesn’t testify in court, you do.
At CKE we build solutions to empower and support investigators in their work, while maintaining the central importance of the human professional in the investigative process.
Transparent
Cyber investigation tools cannot produce results based on opaque processes. Processes must be transparent and results must explainable, often in a court of law. If a result cannot be explained, it cannot be trusted.
All CKE solutions are designed to enable introspection into how and why specific results are obtained and presented to the investigator.
Why CKE?Built by the people who developed the field’s knowledge infrastructure.
CKE’s solutions are designed and developed by domain experts who have spent their careers codifying expertise — through international standards (CASE/UCO), open knowledge bases (SOLVE-IT), curated reference catalogs (NIST ArtCat), foundational textbooks, peer-reviewed research, and the training programs that brought a generation of practitioners into the field. CKE is building capabilities that enhance cyber investigations with accessible, accurate and reliable knowledge, applied automatically at critical junctures in the investigative process.