Retain the reference
Record the finding or document identifier, its source and its relevant dates. Distinguish event time, file creation and the moment the item entered the case.
ACINP / Forensic analysis
From evidence to context. From context to explanation.
A digital and corporate forensic analysis approach to connecting findings, people and documents. ACINP shares questions and methods for explaining how the pieces of a case fit together.
Analytical methods and resources from a nonprofit association
WHO IT IS FOR
Forensic analysts, corporate investigation teams, auditors and professionals explaining technical findings.
Connect the findings
Link accounts, devices, documents and people according to the available sources. Keep the use of an account separate from the identity of its operator.
Explain the limits
Build a timeline and identify dependencies, gaps and alternative explanations. Copies and shared templates can create similarities without establishing misconduct.
A PRACTICE CASE
An invoice and a later document
An amended invoice is found on a computer and sent from a shared account. Payment follows two days later. The analysis connects document versions, the message record, payment authorization and the beneficiary account. A template creation date is kept separate from the invoice modification time. Shared access remains a limitation when attributing an action to an individual.
Version and reference
Compare amendments
Shared account
Authorship unresolved
Payment date
Separate request and approval
The next question
Obtain the original editing record and establish who could access the account during that period.
YAPPARI ONE
A visual workspace for your analysis.
Yappari One supports linked document references, entity charts and dated events. Charts and saved views help communicate the context of findings collected by the forensic team.
This workflow starts with evidence already collected. Device acquisition, file recovery and forensic validation belong to the specialist team and its dedicated tools.
Browser application · Alpha
CONTINUE LEARNING
Method before conclusions.
ACINP promotes intelligence culture through educational resources and analytical tools. These pages apply that mission to specific professional questions.
The course and detailed usage guide are currently available in Spanish.
