Digital evidence for litigation and investigations

Digital forensics that holds up.

Rune Forensics provides forensic analysis, reporting, and testimony for matters involving phones, computers, cloud accounts, email records, and business systems.

Based in Newburyport, Massachusetts, serving clients across New England.

Forensic consulting

Digital records need context before they become useful evidence.

Rune Forensics helps attorneys, businesses, and individuals understand digital evidence in matters involving devices, accounts, communications, files, and system records.

The work is narrow by design. It starts with the dispute, the records available, and the decision the analysis needs to inform. From there, the examination follows the artifacts rather than a preset script.

Findings are written so counsel, courts, investigators, and business leaders can understand the technical basis, the limits of the record, and the reason for any opinion offered.

Services

Focused review of devices, accounts, records, and prior forensic work.

Mobile and computer forensics

Review of phones, computers, files, applications, user activity, timestamps, deleted content indicators, and device artifacts.

Cloud and account analysis

Assessment of login records, cloud exports, sync activity, shared files, security alerts, account changes, and access patterns.

Email and business investigations

Analysis of email records, mailbox rules, message headers, business email compromise, employee activity, and system access questions.

Independent review and testimony

Evaluation of forensic reports, extractions, tool output, affidavits, timelines, and opposing expert conclusions.

Method

The work begins with the question, then follows the evidence.

Before analysis begins, the relevant devices, accounts, records, and deadlines are identified. Preservation and scope are addressed early so the work remains proportional to the matter.

Artifacts are reviewed against source records where possible. Important findings are validated, conflicting records are noted, and assumptions are separated from what the data shows.

Reporting explains the evidence reviewed, the method used, the findings observed, and the limits that matter. A useful forensic opinion should make uncertainty visible where it exists.

Why Rune Forensics

Impartial analysis for matters where the record may be challenged.

Rune Forensics is led by Alexander Harbitz, a digital forensic examiner with experience in forensic casework, report writing, testimony, law enforcement investigations, and digital forensics education.

The practice is built around controlled scope, documented handling, technical validation, and clear reporting. The goal is not to make the evidence sound stronger than it is. The goal is to explain it accurately.

Contact

Send a brief summary of the matter, devices, accounts, and deadlines.

Contact Rune Forensics