Expertise

eDiscovery and digital forensics

Authenticity, provenance and metadata of emails, messages and files.

Having worked with Relativity, Exterro, X-Ways and similar tooling, I conduct forensic examinations of devices, platforms and datasets to determine authenticity, manipulation, provenance and metadata integrity.

I have supported cases involving disputed emails, messaging records, screenshots, log files, version control systems and database artefacts.

Questions I am asked to address

  • Is this email, message or screenshot authentic?
  • What does the metadata show about when, and by whom, a file was created or changed?
  • Does the version control history support the claimed authorship of the code?

Example tools and platforms

Review and forensic platforms
  • Relativity
  • Exterro
  • X-Ways Forensics
Communications
  • Email headers and metadata
  • WhatsApp and Telegram message databases
  • Screenshots and exported chats
  • NLP text-similarity scoring
Devices and systems
  • Android OS and APK analysis
  • Application and server log files
  • Database artefacts
  • Document and PDF manipulation analysis
Code and infrastructure
  • Git commit history and provenance
  • DNS and web infrastructure analysis
  • Cryptocurrency transaction tracing

Let's work together

Discuss an instruction

Send a short outline of the matter, the parties and any deadlines. I will run a conflict check and reply, usually within one working day.