Digital forensics & digital evidence
First response, forensic acquisition, evidence preservation, decision traceability and defensible operational workflows.
Digital Forensics · Digital Evidence · Cybersecurity · AI Security
Evidence-driven work at the boundary between digital investigation and trustworthy AI.
I work across digital forensics, cybersecurity and AI security, with a particular focus on decisions that affect the preservation, reliability, traceability and defensibility of digital evidence.
Three connected areas of work
The portfolio is intentionally organized around one coherent line: handling digital evidence well, understanding the reliability of the technology used to analyse it, and building practical systems that make security decisions more transparent.
Trustworthy AI for investigative use
Research on robustness, traceability, human validation, provenance and accountability in AI-assisted evidence-sensitive workflows.
Security systems & intelligence
Selected projects in OSINT, external exposure assessment and reproducible public-sector security analysis.
Evidence, not labels
Selected public work is presented with clear scope and status so visitors can distinguish publication work, research activity and maintained projects from exploratory prototypes.
61
decision and procedure cards in Evidence First — Vol. 13
primary public workstreams: field guidance, research, applied systems1
coherent focus: trustworthy handling and analysis of digital evidenceSelected work
A small set of projects is highlighted deliberately. Additional experiments remain on GitHub until they are mature enough to strengthen, rather than dilute, the public portfolio.
Evidence First
Decision-oriented field guides for digital-evidence first response, preservation, acquisition, risk, reversibility and documentation.
Trustworthy investigative AI
Research on reliability, validation and technical accountability of AI used in evidence-sensitive investigative contexts.
OpenGovSec · Threat Radar · Domain Risk Scan
Selected work in public-sector security assessment, OSINT monitoring and external exposure triage.
Professional and research context
The site is a public portfolio, not a substitute for an institutional profile or a complete curriculum vitae. Claims are intentionally limited to work that can be described clearly and, where possible, linked to public outputs.