01 / Digital evidence
For legal and forensic teams
Focused analysis of digital records, with clear methods, source references, and explicit limits on what the evidence can establish.
- Deleted-file recovery and filesystem forensics
- Windows artifacts and event timelines
- Mobile device forensics (Android and iOS)
- Email and log chronology
- Custom parsing and data correlation
- Technical findings and review of existing analyses
Begin with a defined question and an agreed set of data. Collection, specialist examinations, and testimony are scoped separately.
Discuss an evidence question