GIFO · INDEPENDENT FORENSIC INVESTIGATION · PORTO, PORTUGALGIFO · PORTO · EN

A traceable process from the initial question to the reviewed deliverable.

The exact procedures depend on the engagement, but evidence status, sources, assumptions and limitations must remain visible.

Five stages with explicit responsibility

A stage may be repeated when new material changes the available explanation.

01

Scope

Define the question, intended use, authority, exclusions and conflicts.

02

Preserve

Identify sources, protect originals and record acquisition or transfer.

03

Analyse

Apply appropriate procedures and distinguish observation from inference.

04

Test

Compare competing hypotheses and record contradictory or missing material.

05

Review and report

Human review confirms wording, support and limitations before delivery.

Retain or return

Apply the agreed retention, return, hold or deletion procedure.

Indicators are not conclusions

The method registry distinguishes operational tools, pilots and experimental indicators.

Integrity and metadata

Hashes, inventories and metadata extraction assist traceability but do not prove authorship or truth.

Image, audio and statistical indicators

Exploratory patterns can be affected by compression, data selection, quality and model limitations.

AI-assisted organisation

Assistance with transcription, chronology or risk indicators requires confirmation against source material.