Insights & resources
Useful references. Clearer next decisions.
Share our capabilities and qualifications, prepare a focused conversation, and see how technical findings can be presented.
For counsel and case teams
Approved references, ready to share.
Legal One-Pager
Our digital forensics and litigation-support capabilities in one concise reference.
Download PDF (1 page)Credential Matrix
Team-held credentials and supporting training, with their relevance to digital-evidence matters.
Download PDF (2 pages)Attorney’s Guide to Digital Evidence
Guidance for planning a proportionate approach to preservation, collection, and review.
Get the guideCredential status is stated as of October 3, 2026. Credentials are held collectively across the team. Assigned examiner qualifications, tool access, and scope are confirmed for each engagement; an assigned examiner’s CV is available on request.
Prepare the conversation
Start with the question you need answered.
Use these planning checklists without including evidence, passwords, protected client information, or sensitive system details. They support a scoping conversation; the final plan depends on the engagement.
Digital evidence planning
- Define the factual question and relevant period.
- Identify likely devices, accounts, custodians, and data sources at a high level.
- Discuss preservation and lawful authority with counsel.
- Confirm deadlines, review platform, and expected delivery format.
- Identify uncertainties and questions for the examiner.
Security assessment planning
- Define the business objective and systems in scope.
- Identify who can authorize the proposed activity.
- Confirm exclusions, test windows, and operational constraints.
- Agree how findings will be prioritized and delivered.
- Plan ownership and validation of agreed remediation.
Systems and workflow planning
- Describe the workload or workflow and its current bottleneck.
- Identify existing tools, integrations, and access boundaries.
- Define budget, timing, location, and lifecycle needs.
- Agree measurable acceptance criteria and recovery needs.
- Confirm handover, documentation, and support responsibilities.
These checklists can be printed or saved using your browser’s Print function.
Illustrative sample deliverables
Findings that support a decision.
All examples below use fictional scenarios and synthetic information. They are examples of presentation, not completed client engagements, actual findings, or promises of results.
Evidence finding excerpt
Question: Does a recorded transfer establish who acted?
Work: Correlate available artifacts and document their limitations.
- Sample observation
- A synthetic log records a transfer at 14:32 UTC.
- Limit
- The timestamp alone does not identify the person or confirm that the file was opened.
- Next decision
- Determine whether corroborating account or device records are needed.
Security remediation excerpt
Problem: A fictional privileged account lacks an agreed control.
Work: Record the condition, business context, and validation criteria.
- Sample recommendation
- Enforce the agreed authentication policy for the scoped account.
- Owner and validation
- The client assigns an administrator; retesting confirms the expected sign-in behavior.
- Next decision
- Approve the change window and assess remaining risk.
System acceptance excerpt
Problem: A fictional team needs a workstation for a defined workload.
Work: Document the configuration and test the agreed workload and recovery procedure.
- Sample acceptance criteria
- Complete the representative workload and demonstrate the documented restore procedure.
- Output
- Configuration record, test observations, exceptions, and handover notes.
- Next decision
- Accept delivery or resolve documented exceptions.
U.S. & international engagement support
Confirm the right delivery approach.
Based in Virginia, TIERS Group supports authorized engagements across the U.S. and internationally. Remote consultations are available for scoping. On-site work, shipping, time zones, language needs, jurisdiction, and any applicable transfer or licensing requirements are reviewed before an engagement is agreed.
Request a consultationPractical guidance
Explore our latest insights.
Connect the Website and CRM Before Adding More Automation
Map what happens after an inquiry: the information captured, responsible owner, response, status changes, and the evidence that the handoff worked.
Read insightDefine the Workload Before Choosing a Workstation or Technical Lab
Turn software, data volume, storage growth, operating constraints, and acceptance criteria into a useful technical-system brief.
Read insightBefore a Security Assessment: Define the Decision You Need to Make
A useful security assessment starts with a defined objective, authorized scope, named owners, and a practical plan for acting on findings.
Read insight