§ PDF library
Guide topics
Every guide in our PDF library, grouped by subject: disclosure, digital forensics, Relativity, mobile and cloud evidence, chain of custody and more. Free to read online or download.
Ref · E-D · 2026 · §TPXClass · ConfidentialJuris · England & WalesStatus · Active
- Mobile and messaging evidence24 guidesWear OS And Android Paired Device Forensics, IPhone Forensics The Defensible Mobile Evidence Bundle
- Forensic collection and imaging22 guidesThe Complete Guide to eDiscovery and eDisclosure, IOS Full File System Vs Logical Acquisition
- Electronic disclosure practice19 guidesGuide 5: Identifying the Right Custodians in Electronic Disclosure, Guide 17: Cooperating on Electronic Disclosure Without Giving Away Your Case
- Apple and macOS forensics14 guidesMacOS Spotlight And Metadata Deep Dive, Gatekeeper XProtect And MacOS Malware Artefacts
- Deleted data and recovery13 guidesIOS App Data And Third Party Application Forensics, Android Deleted Data SQLite And Unallocated Space
- Chain of custody and defensibility10 guidesThe Complete Guide to eDiscovery and eDisclosure, Crypto Assets: Investigation, Tracing, Attribution and Disclosure
- Cloud evidence10 guidesICloud The Account As The Real Evidence Store, IOS Backups ITunes Finder And ICloud
- Expert evidence and reports8 guidesCrypto Assets: Investigation, Tracing, Attribution and Disclosure, IOS Location Services Significant And Frequent Locations
- Servers, NAS and virtual environments8 guidesRAID NAS And Server Recovery, Citrix VDI And Remote Desktop Where The Evidence Actually Resides (1)
- Metadata and timestamps7 guidesMacOS Spotlight And Metadata Deep Dive, Android Photos Media And Metadata
- Open source, web and log evidence7 guidesGeolocation Evidence, OSINT Open Source Intelligence In Litigation
- Custodians and data mapping6 guidesGuide 5: Identifying the Right Custodians in Electronic Disclosure, Guide 4: Finding the Evidence - A Lawyer's Map of Modern Electronic Data Sources
- Encryption and access6 guidesIOS Encrypted Apps And Secure Messengers, Android Encryption Secure Boot And Lock Screen Protections
- Data theft and exfiltration5 guidesData Exfiltration To Cloud Storage, Who Accessed Or Downloaded A Confidential Document
- Disclosure and PD 57AD5 guidesTechnical Preparation For A Disclosure Case Management Conference, PD57AD Explained For Litigation Lawyers
- Email evidence5 guidesApple Mail Archives And Email Threading On MacOS, Shared Mailboxes Delegated Access And Who Really Sent The Email
- Microsoft 365 evidence5 guidesRecovering Evidence From Deleted Microsoft 365 User Accounts, Forensic Collection Of Exchange Online Mailboxes
- Processing and review5 guidesApple Mail Archives And Email Threading On MacOS, Deduplication Explained
- Costs and early case assessment4 guidesCFL Benefits Of Early Case Assessment In EDiscovery, Understanding And Controlling EDisclosure Costs
- Cross-border and data protection4 guidesIOS Health Fitness And Motion Data, Custodian Abroad Cross Border Collection
- Enterprise systems and business records4 guidesGitHub GitLab And Source Code As Evidence, Document Management Systems In Disclosure
- Search terms and technology assisted review4 guidesHow To Design Defensible Keyword Searches, Why Lawyers Should Test Search Terms Before Agreeing Them
- AI and synthetic media3 guidesAI Generated Documents Provenance And Detection, Deepfakes And Synthetic Media
- CCTV and physical access evidence3 guidesRecovering Deleted CCTV And DVR Footage, Door Access Swipe Cards And Building Logs
- Cyber incidents and ransomware3 guidesGatekeeper XProtect And MacOS Malware Artefacts, Android Malware Stalkerware And Compromise
- PD 57AD3 guidesGuide 5: Identifying the Right Custodians in Electronic Disclosure, Guide 17: Cooperating on Electronic Disclosure Without Giving Away Your Case
- Preservation and legal holds3 guidesPreserving Evidence After A Cyber Attack Or Ransomware Incident, Preserving Social Media Evidence
- Production and redaction3 guidesDigital Redaction That Cannot Be Reversed, How To Draft An Electronic Disclosure Production Protocol
- US litigation support3 guidesThe Complete Guide to eDiscovery and eDisclosure, UK Digital Forensics for US Litigation Teams
- Windows forensics3 guidesWhat Evidence Can Be Recovered From A Windows Computer (1), What Evidence Can Be Recovered From A Windows Computer
- Employment and departing employees2 guidesRemote Employee Collection, Investigating Suspected Employee Data Theft
- Google Workspace evidence2 guidesGoogle Vault In Litigation, Collecting Evidence From Google Workspace
- Privilege2 guidesLegal Professional Privilege In Large Electronic Datasets, A Privileged Document Has Been Disclosed What Happens Next
- Slack and Teams2 guidesCollecting Evidence From Microsoft Teams Private And Shared Channels, Slack EDiscovery
- Timelines and reconstruction2 guidesIOS Knowledge And Biome The Device Activity Record, Building A Digital Timeline For Litigation
- Vehicles, wearables and IoT2 guidesWearables And Fitness Tracker Forensics, Vehicle Infotainment And Telematics Forensics
- Cooperation1 guideGuide 17: Cooperating on Electronic Disclosure Without Giving Away Your Case
- Crypto asset investigations1 guideCrypto Assets: Investigation, Tracing, Attribution and Disclosure
- Cryptocurrency and blockchain1 guideCryptocurrency And Blockchain Tracing
- Custodian interviews1 guideGuide 5: Identifying the Right Custodians in Electronic Disclosure
- Custodians1 guideGuide 5: Identifying the Right Custodians in Electronic Disclosure
- Data mapping1 guideGuide 4: Finding the Evidence - A Lawyer's Map of Modern Electronic Data Sources
- Data sources1 guideGuide 4: Finding the Evidence - A Lawyer's Map of Modern Electronic Data Sources
- Disclosure and CPR compliance1 guideThe Complete Guide to eDiscovery and eDisclosure
- Disclosure protocols1 guideGuide 17: Cooperating on Electronic Disclosure Without Giving Away Your Case
- Fraud and corporate investigations1 guideDigital Forensics In Corporate Fraud Investigations
Instruct the practice
Bring us in early.
Defensibility is built, not retrofitted.
Whether you are responding to a regulator, preparing for disclosure, or scoping an internal investigation, start the chain of custody with a short, confidential conversation.