Designed in the UK
TARGETING LATE Q4 2026Release date and final specification to be confirmedJoin the launch list for the planned 10% offer
← The Acorn overview

The Acorn application guide

Case Notes

Record the source, the work you did and the reasons for your conclusion. This example documents an event-log filter and exports a native PDF. Its hash identifies the export; it does not certify the conclusion.

Public training example

Keep the method and findings in a case note

Example input

  • Examiner notes documenting a public-log review, including source hashes and review steps.

Result or controls shown

  • Native case notes and a demonstrated PDF export with its metadata/hash sidecar.
The saved note records the event export hash, the 71-row PowerShell filter result, and checks required before interpreting those rule matches. A PDF was exported through the native Case Notes export function. View full screen
The saved note records the event export hash, the 71-row PowerShell filter result, and checks required before interpreting those rule matches. A PDF was exported through the native Case Notes export function.

Enlarge the screenshot to read the source records.

Examination steps

Steps to review in your evaluation

  1. Record the question, source identifiers and method as work progresses. Include the relevant tool or build and any settings needed to understand a material check.

  2. Separate observed records from interpretation, alternative explanations and unresolved limitations. Record independent checks in enough detail for another examiner to repeat them.

  3. Export the notes and retain the associated metadata with the working record. Check that the handover explains the method as well as presenting the findings.

Evaluate the workflow

Questions worth bringing to a demonstration

  • Could another examiner follow the note back to the source and understand why the material was selected?
  • Does the record distinguish observation, interpretation, an independent check and an unresolved question?
  • Can the exported document and its associated hash be checked without treating either as certification of the opinion?

Related application guides

Forensic WorkbenchArtefact GuideWorkflow CoachAll forensic apps

Start with your requirements

Request an application demo

Tell us the source type and task you want to examine. We can plan a demo using suitable training material. Do not send confidential evidence.

Zoom in, then scroll to inspect the detail.

Open full-resolution image ↗

A useful first conversation

Let’s look at your workflow

Tell us what you examine, where you work and what you need to deliver.

Use the enquiry form to outline your role, intended use and potential order quantity. Do not send case material through a general enquiry.

Open the enquiry formEmail info@sqfr.uk

Your enquiry goes to the SQFR team. Please do not include passwords or case evidence.