a KPMG product
Features
Use cases
Case management
Some or all of the services described herein may not be permissible for KPMG audit clients and their affiliates or related entities. The information contained herein is of a general nature and is not intended to address the circumstances of any particular individual or entity. Although we endeavor to provide accurate and timely information, there can be no guarantee that such information is accurate as of the date it is received or that it will continue to be accurate in the future. No one should act upon such information without appropriate professional advice after a thorough examination of the particular situation. KPMG LLP does not provide legal services. © 2026 KPMG LLP, a Delaware limited liability partnership, and its subsidiaries are part of the KPMG global organization of independent member firms affiliated with KPMG International Limited, a private English company limited by guarantee. All rights reserved.
kpmg.com
Learn about us:
Privacy
Accessibility
Legal
BACK TO TOP
Investigation management
Digital investigations
KPMG Digital Responder
Centralized Solution
Models
Case study
Transform investigations and litigation support through case management and GenAI technology. Streamline artifact collection, processing, and reporting—using a self-service or expert guided model.
Request demo
Explore solutions
Digitizing elements of investigations — Our wide-ranging, thorough engagement delivery platform built by investigators, for investigators.
Evidence management with chain-of-custody tracking
Assign and track tasks across your team
Document entities and persons of interest
Record findings with structured categorization
Interactive event timelines with PDF export
Maintain records of investigation activity, including evidence management with chain-of-custody, assign and track tasks, entities of interest, findings, and timelines.
Real-time client dashboards and status updates
GenAI-powered summarization and event correlation
Generate custom reports (PDF, Excel, Word)
Collaborative findings documentation workspace
Live, auto-updating dashboards and statistics
Monitor team productivity and case progress with live, automatically updated statistics. Enable collaborative documentation and insight sharing.
Analytics and collaboration
Conduct remote and covert collections without disrupting end-user operations. Deploy via EDR/XDR with no installation required.
Remote and covert collections
Step of 6
Generate license
Create a new case in KDR and generate a collector license tied to the engagement.
1
Next: Deploy collector
Next: Collect and encrypt
Configure the lightweight collector and deploy remotely via EDR/XDR—no installation needed.
Deploy collector
2
Next: Secure upload
Execute on live systems. Artifacts are collected, hashed, and encrypted with matter-specific keys.
Collect and encrypt
3
Next: Process and enrich
Encrypted packages are automatically uploaded to our firm’s secure Azure cloud via SFTP or S3.
Secure upload
4
Query results in the dashboard, collaborate in real-time, and generate forensic reports with GenAI summarization.
Analyze and report
6
Next: Analyze and report
Data is decrypted, ingested into Elasticsearch, and enriched with detection rules and IOC matching.
Process and enrich
5
Generate forensically sound results with automated hashing and data verification. Every artifact is validated and court-ready.
Forensically sound results
Deploy customizable, repeatable, automated workflows to scale collections across your enterprise—from one endpoint to thousands.
Scalable automated workflows
Monitor team productivity and case progress with live, automatically updated statistics. Collaboratively capture findings and share insights.
Included features
Platform Capabilities
Maintain detailed records of engagement data and track collected assets within an integrated evidence management system.
Evidence management
Define, track, and assign tasks to your team while monitoring workstream progress through the engagement lifecycle.
Team and task management
Track important events in a normalized timeline format with interactive navigation and PDF export capabilities.
Event timelines
Deliver client answers, showcase achievements, and highlight challenges through streamlined, auto-updating dashboards.
Real-time dashboards
Export case data to create deliverables and generate custom eDiscovery or Investigation reports including artifacts, productions, timelines, and more.
Reporting
Track hours and expenses on a per-resource or workstream basis. Know exactly where you stand with engagement budgets.
Budget and financials
Document entities and persons of interest; generate metrics and insights related to each custodian in your matter.
Persons of interest
Centrally track Indicators of compromise and key statistics while collaborating across your investigation team.
IOC management
The same platform, two different ways of working together.
Two models
How It Works
Self-service SaaS
Expert-guided
Direct cloud access
Self-Service SaaS
Access the full KDR platform directly in the cloud. Deploy collectors, manage cases, and run investigations on your own schedule with your own team.
On-demand access
Pay-as-you-go
Full platform control
Built-in automation
Court-ready deliverables
Hands-on investigation
Strategic advisory
Dedicated KPMG team
Our Cyber and Forensic specialists operate the platform alongside your team—from scoping through final reporting—bringing deep investigative experience to every case.
KPMG-led engagement
Expert-Guided
Robust deployment models, fit for purpose. Outsource detailed investigations, including internal investigations, ethics and compliance, cyber, fraud, and eDiscovery.
Investigation Enabler
Ethics and compliance investigations
Conduct thorough ethics and compliance investigations with streamlined workflows, policy violation tracking, and regulatory reporting.
Thorough
Compliance workflow
Faster evidence collection
70%
Track and analyze potential intellectual property theft with automated artifact collection and timeline reconstruction.
IP theft investigations
Investigation coverage
360°
Combine financial analytics with digital forensics for extensive fraud investigation and evidence preservation.
Fraud investigations
1000+
Leverage...
eDiscover..
Chain-of-custody compliance
100%
Streamline employee misconduct cases with extensive evidence management and chain-of-custody tracking.
Misconduct investigations
Ethics & Compliance investigations
Combine finan...
Fraud inv..
Evidence items per matter
1,000+
Leverage case management functionality to track your eDiscovery matters evidence, status, progress, and productions.
eDiscovery matter management
Conduct...
Ethics...
Combine...
Fraud..
Streamline...
Miscond...
Leverage ...
eDiscov...
Conduct ...
Track...
IP theft...
Track and...
Miscon...
When 200 employees left a large insurance company for a competitor, they engaged KPMG to investigate potential IP theft of more than 2 terabytes of data. Using KDR, we uncovered critical evidence that would have otherwise been missed.
Uncovering IP theft after a mass employee exit
KDR in Action
Results filtered to last 30 days of activity across seven risk categories.
Removable storage device connections
Activity
Example report summary
Found the root cause: Proved a coordinated conspiracy by analyzing over 1 million phone records linking departing employees to the competitor.
Cut investigation time and costs: Automated manual tasks to save invaluable time and resources.
Operational efficiency: Automated investigative tasks that would normally be time-consuming and costly.
Enabled rapid, decisive action: Delivered early intelligence that allowed the client to act before further damage was done.
Exposed multiple exfiltration paths: Proved sensitive IP was copied to external drives, sent via personal email, and printed out.
Key KDR findings
Total
Risk
High
Items from external sources
125
Items from network shared drives
280
Downloaded files
Medium
Cloud storage websites
0
Low
Globally available with real-time updates
Lightweight, portable collector—no installation required
Frost & Sullivan Cyber Innovation Product Award
US patent granted
Developed by KPMG, KDR can be sold to clients as a SaaS offering for internal use—providing self-service access to investigation data and/or bundled with KPMG professional services.
The new standard in investigations
Why KDR
<1 hour
Initial results turnaround
KPMG US DFIR cases on KDR
Automated artifact categories
50+
Global availability
24/7
Ready to transform your investigations?
Case Management
Digital Investigations
Internal Investigations
Artificial Intelligence
CORE CAPABILITIES
PRODUCTIVITY and REPORTING
Expert-level forensics, automated—no forensic experience required.
Automated Forensics
eDiscovery
Some or all of the services described herein may not be permissible for KPMG audit clients and their affiliates or related entities. The information contained herein is of a general nature and is not intended to address the circumstances of any particular individual or entity. Although we endeavor to provide accurate and timely information, there can be no guarantee that such information is accurate as of the date it is received or that it will continue to be accurate in the future. No one should act upon such information without appropriate professional advice after a thorough examination of the particular situation. KPMG LLP does not provide legal services. The information contained herein is not intended to be “written advice concerning one or more Federal tax matters” subject to the requirements of section 10.37(a)(2) of Treasury Department Circular 230. © 2026 KPMG LLP, a Delaware limited liability partnership, and its subsidiaries are part of the KPMG global organization of independent member firms affiliated with KPMG International Limited, a private English company limited by guarantee. All rights reserved.
Transforming investigations through case management and automated digital investigations. Streamline artifact collection, processing, and reporting—using a self-service or expert guided model.
Digitizing elements of investigations—KPMG's one-stop, end-to-end engagement delivery platform built by investigators, for investigators.
Maintain records of investigation activity including evidence management with chain-of-custody, assign and track tasks, entities of interest, findings, and timelines.
Real-time client dashboards & status updates
Next deploy collector
Next collect and encrypt
Configure the lightweight collector and deploy remotely via EDR/XDR — no installation needed.
Next secure upload
Next process and enrich
Encrypted packages are automatically uploaded to KPMG's secure Azure cloud via SFTP or S3.
Next generate license
Query results in the Dashboard, collaborate in real-time, and generate forensic reports with GenAI summarization.
Next analyze and report
Generates forensically sound results with automated hashing and data verification. Every artifact is validated and court-ready.
Platform capabilities
Define, track and assign tasks to your team while monitoring workstream progress through the engagement lifecycle.
Real-Time dashboards
Export case data to create deliverables and generate custom forensic reports including artifacts, timelines, and categories.
Automated reports
Track hours, expenses on a per-resource or workstream basis. Know exactly where you stand with engagement budgets.
Document entities and persons of interest, generate metrics and insights related to each custodian in your matter.
Centrally track Indicators of Compromise and key statistics while collaborating across your investigation team.
Video placeholder
Direct Cloud Access
KPMG's forensic specialists operate the platform alongside your team — from scoping through final reporting — bringing deep investigative expertise to every case.
KPMG-Led Engagement
Robust deployment models, fit for purpose. Outsource end-to-end investigations including internal investigations, ethics and compliance, cyber, fraud, and eDiscovery.
End-to-end
Combine financial analytics with digital forensics for comprehensive fraud investigation and evidence preservation.
Chain of custody compliance
Streamline employee misconduct cases with comprehensive evidence management and chain of custody tracking.
Endpoints per engagement
Leverage Case Management functionality to track your eDiscovery matters evidence, status, progress, and productions.
End-to...
US Patent granted
<1hr
Tasks
Request Demo
PRODUCTIVITY & REPORTING
Compliant
Faster
10x
Global
a KPMG Product
Use Cases
Contact us
Investigation Management
Case Study
Transforming investigations through case management and automated digital investigations. Streamline artifact collection, processing, and reporting — using a self-service or expert guided model.
Explore Solutions
Digitizing elements of investigations — KPMG's one-stop, end-to-end engagement delivery platform built by investigators, for investigators.
Analytics & Collaboration
Remote & Covert Collections
Expert-level forensics, automated — no forensic experience required.
Generate License
Next Deploy Collector
Next Collect & Encrypt
Deploy Collector
Next Secure Upload
Collect & Encrypt
Next Process & Enrich
Secure Upload
Next Generate License
Analyze & Report
Next Analyze & Report
Process & Enrich
Forensically Sound Results
Deploy customizable, repeatable, automated workflows to scale collections across your enterprise — from one endpoint to thousands.
Scalable Automated Workflows
Evidence Management
Team & Task Management
Event Timelines
Real-Time Dashboards
Export case data to create deliverables and generate custom forensic reports including artifacts, timelines, and categories
Automated Reports
Budget & Financials
Persons of Interest
IOC Management
Video Placeholder
Two models.
Ethics & Compliance Investigations
IP Theft Investigations
Fraud Investigations
Misconduct Investigations
Fraud Inv..
eDiscovery Matter Management
IP Theft...
Uncovering IP Theft After a Mass Employee Exit
Removable Storage Device Connections
Example Report Summary
Key KDR Findings
Items from External Sources
Items from Network Shared Drives
Downloaded Files
Cloud Storage Websites
Lightweight, portable collector — no installation required
Developed by KPMG, KDR can be sold to clients as a SaaS offering for internal use — providing self-service access to investigation data and/or bundled with KPMG professional services.
The New Standard in Investigations
Ready to Transform Your Investigations?
Contact Us
