Skip to main content
Resources

Guides, references, and field notes

Practical guides for choosing and running defensible evidence software, the standards EMP Intake is built on, and free in-browser tools to verify your work.

Choosing the right software

Choosing software resource thumbnail
Buyer's guide
Evidence workstation software: a buyer's guide
The criteria that separate a defensible workstation from a glorified folder.
Read the guide →
Choosing software resource thumbnail
Guide
Incident reconstruction software
Rebuilding a timeline from evidence, and keeping it defensible.
Read the guide →
Choosing software resource thumbnail
Guide
Workplace-investigation software
Running HR and internal investigations with a record that stays verifiable.
Read the guide →
Choosing software resource thumbnail
Guide
Case management in a spreadsheet
Why a spreadsheet and a shared drive quietly break custody, integrity, and your audit trail.
Read the guide →
Investigation case management software pricing guide thumbnail
Guide
Investigation software pricing: real numbers
What the enterprise platforms actually cost, from public price lists and government contract records.
Read the guide →

Defend the case

Defending your evidence

Defending evidence resource thumbnail
Guide
Chain-of-custody software
What chain-of-custody software actually has to do, and how to evaluate it.
Read the guide →
Defending evidence resource thumbnail
Reference
Deposition-defensible evidence
What makes evidence survive a deposition, and how to prepare for it.
Read the reference →

Hand it off

Verifying & handing off exports

Standards and specs resource thumbnail
Standard
EMP Export Package format
The structure of an EMP export package and how anyone can verify it.
Read the standard →
Forensic tools resource thumbnail
Free tool
Verify an export package
Drop in an EMP export package and re-hash every file against the manifest, in your browser. Nothing uploaded.
Open the tool →
Reference

Standards & specs

Standards and specs resource thumbnail
Standard
DNM File Naming Standard
The naming convention EMP Intake uses, and why consistent names matter.
Read the standard →
Forensic tools resource thumbnail
Free tool
SHA-256 file verifier
Compute any file's SHA-256 checksum and compare it to an expected value, entirely in your browser.
Open the tool →
Compare EMP

How EMP compares

Weighing EMP against another tool or the status quo. Straight, side-by-side reads on where EMP fits and where it does not.

Comparison
EMP vs Case IQ (i-Sight)
Local evidence integrity versus a hosted case-management platform.
Read the comparison →
Comparison
EMP vs Resolver
A focused intake-to-export workstation next to a broad GRC suite.
Read the comparison →
Comparison
EMP vs NAVEX EthicsPoint
Where a hotline-led reporting tool ends and evidence handling begins.
Read the comparison →
Comparison
EMP vs enterprise case management
When a full case management deployment is more than the job needs.
Read the comparison →
Comparison
EMP vs spreadsheets and shared folders
What you give up when evidence lives in a folder and a tracking sheet.
Read the comparison →
Comparison
EMP vs Kaseware
A focused local evidence workstation next to a full investigative platform for agencies.
Read the comparison →
Comparison
EMP vs Ontic
A local evidence workspace next to a connected intelligence security platform.
Read the comparison →