Examine the record against the defense's questions.
A timestamp can be read in the wrong timezone. A system-generated artifact can be mistaken for a user's action. A production may contain evidence relevant to an alternative explanation that was outside the original examination's scope.
Independent review evaluates the evidence, the methods used, and the conclusions drawn. The questions raised by defense counsel guide the examination; the underlying record determines what can be supported.
What a second examination includes.
Independent imaging and preservation
Defense copies of the available digital evidence, with hashes and chain-of-custody documentation. The acquisition and source materials are assessed rather than relying only on a report's description.
Timeline reconstruction
Timestamp analysis across file systems, applications, and network artifacts, accounting for timezone handling, clock drift, and automated activity.
Alternative explanations
Examination for evidence of malware, remote access, shared-device use, and automated processes that may bear on an attribution of activity to the defendant.
Methodology review
Review of the prosecution expert's report, tools, assumptions, and limitations. We prepare technical findings and materials counsel can use in deposition or cross-examination.
Experience with CJA and JAC matters.
Our team has taken CJA appointments in federal matters and JAC appointments in Florida state matters. We scope engagements to the authorized work and budget, and prepare documentation compatible with the applicable fee-application and reimbursement process.
Sensitive criminal matters receive the same discretion and forensic discipline as the other work we handle. Our experts can explain the examination and its limitations in testimony.
Scoping the engagement.
Describe the charge type, jurisdiction, appointment status, available production, and questions counsel needs answered. Include relevant deadlines and any limits on access to the evidence.