Examination lab
Forms and templates
The records that hold an examination together. Each form can be filled in the browser and exported as text or JSON for your own case file; a draft is kept only in this browser and nothing is sent anywhere. Use them as a starting structure and adapt them to the authority you work under.
F-01
Chain of custody form
One form per item: identification at seizure, then one signed line per transfer with purpose, seal number and condition. Fill in, print or download.
F-02
Evidence intake form
Registers a delivery into the laboratory: request details, one line per item with identifiers, seal status and state, the questions asked and any discrepancy.
F-03
Acquisition record
Documents one acquisition: source device, write protection, tool and format, times, errors, hash values, and for mobile devices the extraction type and limits.
F-04
Examination log
Contemporaneous session notes: header with working copy hash, then one line per action with tool, parameters, observation, evidence reference and decision.
F-05
Legal hold notice
Generates a preservation notice: matter, recipients, scope, date range, data sources and obligations, with an acknowledgement line. Print or download.
F-06
First responder checklist
Tick-box checklist for securing a scene and seizing computers and phones: preparation, documentation, powered-on and powered-off handling, packaging, custody.