Insights from the Forensic Front Line.
Articles, analyses, and practical guidance on the evolving landscape of digital evidence — mobile devices, cloud forensics, social media authentication, departing-employee readiness, and the procedural and ethical questions that come with them.
From Lock Screen to Legal Review
Navigating Mobile Device Evidence — A walkthrough of how mobile evidence moves from the device through forensic acquisition, into review, and ultimately into the legal record. Video presentation, 2025.
Watch / ReadRecent publications.
Apple Changes Messaging with iOS 18
What iOS 18 changes about how messages are stored, attached, and recovered — and what it means for examiners and counsel.
Read more →The Evolution of Email Attachments and Implications for Discovery
How modern email handling of attachments (cloud links, inline previews, modern formats) has reshaped what 'produce the attachment' actually means.
Read more →Social Media Forensics: Preservation, Collection & Authentication
Why social media evidence is among the easiest to challenge — and what defensible capture actually requires.
Read more →Signal Digital Forensics: When Encrypted Doesn't Mean Invisible
The forensic artifacts that survive even on devices using end-to-end encrypted messaging.
Read more →Understanding Metadata Dates in eDiscovery
The four (or more) timestamps every file carries, why they disagree, and how to avoid embarrassing yourself in motion practice.
Read more →The Evolution of Cloud Forensics
How cloud architectures have outpaced traditional forensic methodologies — and what defensible cloud forensics looks like.
Read more →Following the Forensic Road Map
A practical guide for attorneys and forensic examiners working together at the start of a matter.
Read more →How Much Do You Really Know About Email Investigations?
Published in Above the Law. The forensic questions email investigations actually need to answer.
Read more →IoT Gadgets: New Sources of Discoverable Evidence
Published in Law.com Legaltech News. The expanding universe of devices producing legally-relevant data.
Read more →Pocket Evidence: How to Collect and Review Mobile Device Data
A practical guide to mobile evidence collection and review.
Read more →A Safer eDiscovery Data Collection Practice During Coronavirus
Remote forensic collection methodologies developed during 2020.
Read more →When Key Employees Quit: 5 Things You Must Do to Keep Control of Critical Data
Published in Law.com Legaltech News. The five forensic actions that should follow any high-impact departure.
Read more →Stay current on digital evidence practice.
We publish new insights on the practical questions attorneys are facing in digital evidence matters — and don't fill inboxes with anything else.