Contact
Contact
ZEKASTRA Forensic is a training and reference resource. Lawyers and law firms, corporate security and compliance teams, expert witnesses and digital forensics teams can write about the topics below.
What you can write about
Examination requests
State requests about communication records, SQLite and WAL databases, timeline reconstruction or artifact verification by topic and scope in your first message.
Support for expert witnesses
Write to have an existing report read for how it states its method, provenance chain and UTC normalisation, or for peer support.
Training and reference questions
Ask about team workflows, case packs, procedure templates and the reference library.
Start an email
Each button opens a draft in your own mail client with the subject filled in. Nothing is sent from this site.
Frequently asked questions
Can I process my files on this site?
No. Tool and method pages show each step, but file processing is disabled: no file is read or uploaded.
Are my files uploaded anywhere?
No. These pages do not upload or store files. Please do not send evidence files or personal data by email either.
Can I use real case material?
Every case study, case pack and exercise here is fictional and prepared for training and reference. Please do not open real case material or personal data in these tools.
What if I have a real file or device image?
Do not open it here. These tools are for training and reference, and file processing is disabled on these pages. Opening real evidence on an unauthorised computer can change its metadata and timestamps. An authorised examiner should acquire the material with a write blocker and a verified image first.
Where does the reference content come from?
Every artifact entry and event ID cites the documentation it is based on, such as Microsoft Learn, Apple and Android developer documentation, the SQLite and Mozilla specifications, IETF RFCs and the libyal format notes. Each source shows the date it was last checked.
Is there a suggested order for learning?
Yes. The curriculum arranges the library, tools, case studies and exercises into 12 modules, starting with integrity and time and ending with timelines and reporting.