Findings and reporting

Walk through a case

One sample case, from intake to report. Every identifier here is made up, so you can explore freely. Use the arrow keys to move between steps. Everything you do stays in your browser.

Graded findings

Graded red, amber or green, with the reason and a clear way to read it.

Your decision

The examiner confirms or rejects each finding. A decision applies to the result it was made on; if the result changes the decision is shown as superseded.

Leads, not verdicts

Insight leads are starting points for corroboration, never verdicts. Leads are ranked so the strongest come first; the examiner decides.

A ledger you can check

The application audit ledger records who did what and when, and verification shows a changed record.

Up Down move between steps. In Findings, Up Down choose a finding.

SAMPLE-CASE-0001 · Sample phone ASample data

Intake

Evidence share (read only). SectraTEK reads it where it is and does not copy it.

  • Files found3 of 3
  • Hashes recorded3 of 3
  • Opened read-onlyYes
  • Copied into the caseNo
Evidence files and their SHA-256 hashes (sample data)
FileSizeSHA-256
SAMPLE-0001-filesystem.zip17568.7 MB4712f23ba9ea81e909ac9af1f54e64ddbc6c0ff2fdef78b31d05b87aead44896
SAMPLE-0001-extraction-report.pdf2.1 MB7a7492b305f66f9700f7ae54cdac1a51f68b0dadec5871d1acc7f6dd81d8f551
SAMPLE-0001-traffic.pcap297.5 MBdafd84954538055976b617552a1c7cc568299687874a27806ae3618c97290109

The same step in the app

SectraTEK Full
New case dialog for an iOS examination: the examination type, case name and evidence identifier, the examiner, and the authorization confirmation. The form is empty and nothing is submitted.
Demonstration case. The new-case dialog in SectraTEK Full: examination type, case name and evidence ID, the examiner, and the authorization confirmation. Nothing is submitted.

The sample case is synthetic and is the same every time you open it.

Want to see your own cases?

A demo covers your evidence types and your reporting needs.

Read the Cookie Statement