COMING SOON · Q1 2027 Planned releaseGet notified + 10% launch offer ↗
← Acorn overview

Acorn application guide

Case Notes

A useful case note connects the question, the source, the work carried out and the reasoning. Case Notes supports that account alongside the examination, with a demonstrated native PDF export. A hash can identify an export; it cannot certify its conclusions.

Demonstrated on public training data

Can another examiner follow the recorded method and see how the conclusion was reached?

Start with

  • Examiner notes documenting a public-log review, including source hashes and review steps.

What you can take away

  • Native case notes and a demonstrated PDF export with its metadata/hash sidecar.
The saved note records the event export hash, the 71-row PowerShell filter result, and checks required before interpreting those rule matches. A PDF was exported through the native Case Notes export function. View full screen
The saved note records the event export hash, the 71-row PowerShell filter result, and checks required before interpreting those rule matches. A PDF was exported through the native Case Notes export function.

Open the screenshot and choose “View actual size” to read the records at their original resolution.

A practical starting point

How the workflow fits together.

  1. Record the question, source identifiers and method as work progresses. Include the relevant tool or build and any settings needed to understand a material check.

  2. Separate observed records from interpretation, alternative explanations and unresolved limitations. Record independent checks in enough detail for another examiner to repeat them.

  3. Export the notes and retain the associated metadata with the working record. Check that the handover explains the method as well as presenting the findings.

Evaluate the workflow

Questions worth bringing to a demonstration.

  • Could another examiner follow the note back to the source and understand why the material was selected?
  • Does the record distinguish observation, interpretation, an independent check and an unresolved question?
  • Can the exported document and its associated hash be checked without treating either as certification of the opinion?

Start with your requirements

Bring a sample question.

Ask us to demonstrate this workflow with suitable public or constructed material. Do not send confidential evidence in an initial enquiry.

Planned for Q1 2027

Be first to hear. Save 10% at launch.

Request Acorn launch news and details of the planned 10% offer. No deposit or purchase commitment.

Notify me at launch ↗

Launch-update requests go to the SQFR team for review. Final offer terms and product availability are still to be confirmed.

About the screenshots and illustrations

Application screens are selected from the September 2026 Acorn screenshot pack. Captions distinguish native setup views, constructed training records and public-corpus results. They are not private client cases, and a displayed control does not establish that every operation was completed.

Relevant public sources include DeepBlueCLI training event logs and Plaso test data. Check the relevant source terms before redistributing an underlying dataset.

Workspace scenes and sector mascot variants are generated illustrations. They do not show actual police, judicial, military or university deployments or endorsements. The original Squirrel Forensics identity is retained.

Zoom in, then scroll to inspect the detail.

Open full-resolution image ↗

A useful first conversation

Let’s look at your workflow.

Tell us what you examine, where you work and what you need to deliver.

Use the enquiry form to outline your role, intended use and potential order quantity. Do not send case material through a general enquiry.

Your enquiry goes to the SQFR team. Please do not include passwords or case evidence.