Observed arrival · 2026-09-13
Evidence First: A Field Guide for Decisions Before the Evidence Changes
A forthcoming digital-forensics guide that structures first-response decisions around observable state, consequences, reversibility, and documented action.
Field notes
The project organizes first-response work around the state of evidence at the moment an operator encounters it, rather than around a fixed command or product. Its stated sequence runs through ten stages, including footprint, risk, and reversibility, and the homepage illustrates the approach with a multiple-live-device prioritization case. The forthcoming first volume is described as 174 pages with 61 core field cards, 33 state maps, and A0–A4 field forms; related volumes are listed as in production.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue