Organize Critical and Complex Investigations with Forensic Notes.
Forensic Notes stores all notes, images, and attachments in a timestamped read-only format to protect the integrity and admissibility of evidence.
Forensic Notes simplifies and reduces human error in complex investigations by centralizing and organizing every note created in an investigation. This ensures vital notes are never lost, misplaced, or forgotten - but always available to those who need them during the investigation, disclosure, and on the stand
Thank you for checking out Forensic Notes and for taking the time to write a review on DFIR Training.
I can see from your LinkedIn and blog that you are an experienced forensicator and have a clear understanding of what you like and need for Incident Response.
You are correct in stating the “audit trail that can be valuable for LEA”, especially considering restrictive warrants that are becoming common in criminal and civil investigations. Audit trails can also be valuable for management and the ability to track which users have read or downloaded a specific note or notebook within the system.
I come from LEO background, so a lot of the design is based off the needs of criminal courts and what I see in regards to ISO certification and documentation in the UK.
A battle my company will continue to have is the comparison to MS Word and OneNote which I believe is fair until you consider the potential legal issues in using either for contemporaneous note taking.
I have a detailed article on this exact discussion at:
The article is not ‘officially’ released as I have been waiting to finalize the new design of our public site which is set for release by end of December, but it is online now.
If you have a chance to read the article, please pay special attention to the section titled “Bound Paper Notebook & Pen”. (half-way down the page)
When creating paper notes (vs. Electronic) - If you believe that you should use a bound paper notebook following the ELBOWS set of rules for writing notes, then you will hopefully see the power of Forensic Notes and why it is different than MS Word and OneNote.
This is all possible because every note can be Digitally Signed and Timestamped allowing you to prove when you wrote a note. In addition, every image and attachment you add to a note is automatically hashed (MD5, SHA-512).
The application has a lot of additional features including templates, handwriting tools, etc.
Mustafa: I upgraded your account to Professional in case you want to take a more detailed review.
Please feel free to email me if you have any questions. Cheers,
The only advantage it seems to have is the audit trail that can be valuable for LEA but not much for day to day DFIR note taking. I would still prefer One Note / Office365 / Google Suite.
Evidence attachment is a vanilla feature and has no additional value for investigators. Desired features would include the classification of evidence types e.g. images, documents, PCAPs, and other digital forensic artifact etc.
I signed up for the free version and there isn't much to explore. Above thoughts are based on my quick evaluation. I didn't get any reason to opt for a weeks-long trial.