Short technical notes on preserving online material, keeping custody records, and preparing evidence files for qualified review.
Current notes
These pieces are written around the questions that come up before a matter reaches counsel: what to capture, what to keep separate, what to log, and what not to conclude too early.
Checklist
11 min read
A practical, field-tested checklist for preserving source links, timestamps, screenshots, media, account context, and custody notes before material changes or disappears — and for assembling them into a file counsel can actually use.
Open resource →Workflow
10 min read
How to preserve suspected manipulated media and its full distribution context — provenance signals, detector outputs treated as signals rather than verdicts, and uncertainty stated plainly — without relying on detection claims.
Open resource →Guide
9 min read
A structure for documenting impersonation accounts as they change: profile state, audience contact, report history, related accounts — and the chronology that turns scattered profiles into an actionable pattern.
Open resource →Reference
10 min read
The operational record that links capture, storage, review, and export into one inspectable file: the event vocabulary, what hashes do and do not prove, and the handling discipline that survives adversarial questions.
Open resource →FINIUM LEGAL
Send one public URL or representative matter and review the kind of structured output Finium is built to prepare.