COMING SOON · Q1 2027 Planned releaseGet notified + 10% launch offer ↗
← Acorn overview

Acorn application guide

Workflow Coach

A checklist can prompt useful questions at the right stage. Workflow Coach supports a reasoned examination rather than replacing the examiner's method.

Teaching checklist

Which preservation and review steps should a trainee consider before moving to a conclusion?

Start with

  • A Windows dead-box examination checklist in the teaching interface.

What you can take away

  • A structured teaching and planning checklist.
The built-in Windows examination checklist sets out preservation, hashing, triage and reporting steps. An examiner can select a step and open its linked tool where available. View full screen
The built-in Windows examination checklist sets out preservation, hashing, triage and reporting steps. An examiner can select a step and open its linked tool where available.

Open the screenshot and choose “View actual size” to read the records at their original resolution.

A practical starting point

How the workflow fits together.

  1. Start with source preservation and the scope of the exercise.

  2. Work through the hashing, triage and review prompts against the supplied evidence.

  3. Record what was checked and adapt the method to the actual question and limitations.

Start with your requirements

Bring a sample question.

Ask us to demonstrate this workflow with suitable public or constructed material. Do not send confidential evidence in an initial enquiry.

Planned for Q1 2027

Be first to hear. Save 10% at launch.

Request Acorn launch news and details of the planned 10% offer. No deposit or purchase commitment.

Notify me at launch ↗

Launch-update requests go to the SQFR team for review. Final offer terms and product availability are still to be confirmed.

About the screenshots and illustrations

Application screens are selected from the September 2026 Acorn screenshot pack. Captions distinguish native setup views, constructed training records and public-corpus results. They are not private client cases, and a displayed control does not establish that every operation was completed.

Relevant public sources include DeepBlueCLI training event logs and Plaso test data. Check the relevant source terms before redistributing an underlying dataset.

Workspace scenes and sector mascot variants are generated illustrations. They do not show actual police, judicial, military or university deployments or endorsements. The original Squirrel Forensics identity is retained.

Zoom in, then scroll to inspect the detail.

Open full-resolution image ↗

A useful first conversation

Let’s look at your workflow.

Tell us what you examine, where you work and what you need to deliver.

Use the enquiry form to outline your role, intended use and potential order quantity. Do not send case material through a general enquiry.

Your enquiry goes to the SQFR team. Please do not include passwords or case evidence.