CoverageIndustry 6 min read
Coverage should not depend on a vendor release cycle
The most consequential decision in a forensic examination is often made months earlier, in a product meeting the examiner was not in.
14 July 2026 Read
Resources
Enough to judge this without a sales conversation.
Writing about the problems in the work rather than about the product, objections answered plainly, and the vocabulary defined for anyone who does not already have it.
- Articles Pieces about the real constraints in examination work. 7 pieces
- Questions and answers The objections a service raises, answered as they arrive. 23 entries
- Glossary The vocabulary of the field, defined plainly. 25 terms
Articles
All articles ExtractionsPractice 7 min read
What a Full File System extraction actually contains, and why most of it is never examined
A modern phone extraction is not a large set of messages. It is an operating system, dozens of application stores, and a sediment of caches and system traces. Understanding the shape of it explains where examination time goes.
21 July 2026 Read
AIAdmissibility 7 min read
Verifying AI output in digital forensics: what a court needs to see
An AI assistant in a forensic tool is only usable if its output can be checked against the original record. That requirement is not a compliance detail, it is the design constraint everything else follows from.
28 July 2026 Read
See it running on a real extraction
Usually thirty minutes on a video call, on fictitious data. On site if you need it, or a conversation first. If VERA does not fit what your service needs, that is a useful answer too.
Every request is reviewed before access is granted.