What source records were examined?
Independent forensic review
A forensic report may not be the final word.
A report can be detailed and still rely on incomplete records, unsupported assumptions, tool output without validation, or a question that does not match the dispute.
Report analysis
Independent review asks whether the opinion follows from the record.
Independent forensic review is not an exercise in automatic disagreement. The work is to examine the underlying evidence, methods, artifacts, assumptions, limitations, and reasoning behind a conclusion.
Attorneys often receive a forensic report after a tool processed a device, a timeline was created, or an examiner reached an opinion. The next question is whether the conclusion is reproducible, properly limited, and supported by source records rather than by summary output alone.
Before accepting a conclusion
The report should answer more than what a tool displayed.
Can the reported finding be reproduced from the evidence?
Were screenshots used where native records were available?
Did the examiner separate facts from interpretation?
Were alternate explanations addressed?
Were extraction limits, missing records, and tool limits disclosed?
Were relevant accounts, devices, logs, or productions omitted?
Does the opinion answer the actual legal or investigative question?
Opinion support
Some findings are supported. Others need more context.
Supported by record
- Finding tied to source artifacts
- Dates checked across more than one source
- Tool output validated against databases or logs
- Limits and assumptions stated clearly
- Alternative explanations considered
Needs closer review
- Conclusion based only on a screenshot
- Timeline missing relevant sources
- Tool label treated as a final opinion
- Examiner reaches beyond available records
- Missing data described as intentional deletion without support
Independent review consultation
Need a forensic report or opposing opinion evaluated?
Rune Forensics can review extractions, reports, timelines, tool output, screenshots, native records, metadata, and disputed forensic conclusions.
Request consultation