Blog · Knowledge centre
Notes from the practitioners.
Written for solicitors, in house counsel, government teams and private clients who need to understand what digital forensics can do for a case, before commissioning the work.
§ 01 · Featured
Start here.
Method
Your Phone Says You Were There, but How Accurate Is It?
Mobile location data ranges from precise GPS coordinates to cell tower sectors spanning several miles. Discover how UK courts evaluate phone location accuracy.
Read →
Method
Challenges of Corporate Mobile and Cloud Data Extraction
Extracting digital evidence from corporate smartphones and cloud systems requires balancing strict hardware encryption with complex API limitations and UK disclosure rules.
Read →
Method
Factory Reset: Is the Evidence Really Gone?
A detailed forensic examination of smartphone factory resets, hardware encryption, crypto-erasure, and secondary avenues for evidence recovery in UK legal proceedings.
Read →
§ 02 · Archive
The full archive, by subject.
Mobile forensics
- → Mobile phone forensics: the core principles and how it works.
- → Physical extraction: what it reaches, and what it does not.
- → What a mobile phone forensics expert actually does for your case.
- → Cell site analysis: what it can and cannot say about where a phone was.
- → Social media forensics: turning posts, DMs and metadata into evidence.
- → Suspected mobile hacking: how a forensic investigation is actually run.
- → The role of mobile phone experts in civil and criminal litigation.
WhatsApp forensics
Cyber
- → You think you have been hacked. What to do in the next twenty four hours.
- → Engaging a computer hacking investigator: what to expect.
- → Why cyber forensics has become critical for UK legal and corporate work.
- → Penetration testing: what it is, what it is not, and when to commission it.
- → Incident response: what it means in practice.
Method
- → Your Phone Says You Were There, but How Accurate Is It?
- → Challenges of Corporate Mobile and Cloud Data Extraction
- → Factory Reset: Is the Evidence Really Gone?
- → Disappearing Messages: Do They Really Disappear?
- → Electronic disclosure and cloud data collection: a guide for in-house counsel
- → Does Switching Off a Phone Preserve Evidence or Hinders Forensics?
- → Can a Phone Prove Who Was Actually Using It?
- → Locked Phone Forensics: How Examiners Access Locked Device Evidence
- → What Happens to a WhatsApp Message After Delete for Everyone?
- → The Evidential Question Matrix: Matching Allegations to Digital Sources
- → Departing Employee: First 24 Hours of Digital Evidence
- → The Prosecution Has Served a Phone Extraction: What Should the Defence Check First?
- → Don't Ask What Is on the Phone: Framing Forensic Questions
- → Did an Employee Copy Files to a USB Stick? Digital Traces Explained
- → Is This Email Genuine? Seven Digital Clues That Help Authenticate It
- → Who Downloaded That Confidential File? Using M365 Logs to Find Out
- → Screenshots vs Real Conversations: Proving Chat Evidence in UK Courts
- → The digital forensics chain of custody, in plain terms.
Guides
- → Logical vs physical extraction: choosing the right method.
- → What device acquisition means, and why it matters.
- → Forensic triage: getting the right answer, faster.
- → Preserving email evidence: a practical guide for solicitors.
- → Data preservation in 2026: what has changed, and what has not.
- → Cybersecurity for solicitors: the 2026 UK guide.
- → Investigating insider threats without breaking the evidence.
- → The investigation workflow, explained for legal professionals.
- → Password cracking in forensics: techniques and workflow.
- → How to choose a digital forensics company.
- → Computer forensics vs digital forensics: what's the difference?
Forensics & law
- → Instructing a computer expert witness: what solicitors need to know.
- → Legal applications of digital forensics across UK practice.
- → How digital forensics helps solicitors defend their clients.
- → Digital forensic artefacts and their evidential value.
- → Digital document forensics: is that document genuine?
- → The UK digital evidence backlog: what it means for defence teams.
- → Family Court phone evidence that stands up.