SHERLOCK
Find Your Work
Reconstruct years of work from documents, email, images, audio, and more.
Upload your files.SHERLOCK reconstructs what happened.
TEMPUS
Current year temporal structureCHRONOGRAPH
Recovered chronology and timelineYour report is ready.
Recovery Export
Export recovered artifacts from the Archive tab using Recovery Tickets.
Recovered Artifacts
Browse and export recovered artifacts from the investigation archive.
DECISION LEDGER
Specialist decisions, actions, and escalations
Idle
INVESTIGATION PLAYBACK
Replay the investigation as it occurredSTUDY
Operational investigation activity and specialist outputSPECIALIST TERMINAL
Specialist investigation recordCHRONOLOGY ENGINE
Sherlock ingestion results organized by year, month, week, day, and hourChronograph Rail
Selected Day
Recovered Artifacts
Evidence Inspector