Taking instructions now — the first conversation is freeExhibits posted in from anywhere in the UK, or handed in at ten drop-off pointsQuicker still, give us a ring:0800 6890668
FDRForensic Data Recovery 0800 6890668 Price my job
FDR / Sample reports

Illustrative — synthetic data · £800 + VAT, one disk

Sample forensic reports. Four standard reports, as they read, with invented data.

The clearest way to show what the standard forensic report contains is to show one. The four reports below are illustrative, written with synthetic data, but they follow the structure and depth of the real thing: the cover and the authority held, the scope and the questions asked, the exhibit and its integrity record, the tools and method, the findings by category with the tables the tools produce, a timeline, the limitations and factual conclusions. Each is written as fact, with no opinion on guilt or intent, and each says plainly what the evidence cannot prove. Read the one closest to your situation.

Standard report £800 + VATSynthetic dataFactual findings onlyThe limits stated

Rather talk it through? An engineer answers the bench line
0800 6890668

Illustrative — synthetic data. This is an example of the standard forensic report, written to show its structure and depth. The people, companies, serial numbers, hashes and dates are invented, and the hashes are shortened placeholders, not real values. A real report is a self-contained HTML or PDF document produced in OSForensics, with its chain-of-custody and case-log reports attached, and findings confirmed in a second tool.

The four sample reports.

Standard or expert report → →

Choose the closest to your situation

Departing employee: company laptopUSB serials, files opened from removable drives, a personal cloud client, 412 deletions on the last afternoon→Divorce: your own laptop, lawful routeHer own device: 79 deleted financial documents recovered, their dates, relevant email, earlier budget versions→Shareholder dispute: office PC6,318 deletions the morning after the demand letter, a cleaning tool with overwriting, two forwarding rules→Insurance claim: damaged laptopLiquid damage documented, the connector cleaned and recorded, 612 GB recovered, 118 files lost→

What every standard report contains.

Cover, authority and scopeThe case and exhibit references, the instructing party and the authority held, and the questions the examination was asked to answer.
Exhibit and integrityThe exhibit's condition on receipt, the imaging method and write blocker, and the MD5 and SHA-256 hashes, verified at acquisition, before analysis and before the report.
Findings by categoryTables of what the device records, USB devices, files opened, deletions, email, metadata, with times in UTC, and a timeline of the period that matters.
Limitations and conclusionsWhat the evidence cannot show, stated plainly, and conclusions confined to fact, with the exhibit list and appendices.

The questions that come up first.

Are these real cases?

No. They are illustrative reports written with invented data, to show the structure and depth of the standard report. Names, companies, serial numbers, hashes and dates are synthetic.

Will my report look like this?

It will follow the same structure, as a self-contained HTML or PDF report with its chain-of-custody and case-log reports, with findings shaped to your questions.

Do the reports give an opinion?

No. The standard report records what the device shows, as fact. Where a court needs opinion evidence, an expert report is quoted separately.

What does a report cost?

The standard forensic report for a one-disk system is £800 + VAT; a second disk is quoted as extra.

Read the closest, then tell us yours.

The first conversation is free, and it tells you whether the standard report answers your questions.

0800 6890668

Price my jobPacking and posting