The Decision Trial Counsel Faces Before the Evidence Is Collected
Most of the digital evidence problems that surface at trial were created months earlier, when a screenshot was taken instead of an image, when an IT administrator exported a mailbox without documenting how, or when a phone was handed to a paralegal who scrolled through it before anyone preserved it. By the time a motion to exclude is filed the choices are fewer and more expensive. The decision counsel faces at the outset is therefore about method rather than about the expert. Which sources will matter, how they will be acquired so that a later certification under Rule 902(13) or 902(14) is possible, who will document the chain of custody, and which propositions the evidence will be asked to support. An examiner retained before preservation can shape the ESI protocol and prevent the self collection problems that opposing counsel will later exploit.
The second decision comes when the expert file is assembled. Amended Rule 702 asks the court to find that the proponent has shown by a preponderance that the expert's opinion reflects a reliable application of a reliable method to sufficient facts, and the 2023 amendment made clear that this is a gatekeeping question rather than one of weight. The Rule 26 report has to state every opinion and its basis, and in our practice it also contains an opinion to source matrix tying each conclusion to specific artifacts, tool versions and validation steps. The guides in this topic are organized around those two decisions, the one made before collection and the one made before disclosure, because the record counsel builds in the first governs how much the expert can say in the second.
How to Read These Guides and in What Order
Begin with the cross examination guide, which explains why surface screenshots and unverified exports collapse under questioning and how an examiner separates automated system activity from deliberate human action. Then read the Rule 702, Daubert and Frye guide, which turns to the expert file itself, the discoverable and protected parts of it, and the opinion to source record that lets a court check the reasoning. The scoping guide belongs third, because it shows general counsel and audit committees how to match the legal question to the highest value sources and use proportionality under Rule 26(b)(1) to control cost without weakening the record.
The next group concerns particular evidence types and the limits each carries. The mobile location guide explains why raw coordinates plotted on a map can mislead a court and how accuracy radii, cached WiFi positioning data and timezone shifts are reconciled. The questioned media guide covers photographs, audio and video in the age of generative AI, and why container, pixel and sensor analysis rather than an AI detection score is what a court can evaluate. The legacy publications that close the topic apply the same discipline to litigation timelines, deleted texts and encrypted chat applications, smartphone and vehicle telemetry in accident litigation, IoT and wearable records, and cloud eDiscovery architecture, each with a section on what the record can establish and what counsel should not claim from it.
What GDF Does for Trial Counsel
Global Digital Forensics has supported counsel with forensic examinations, expert reports and testimony since 1992, and its examiners have testified in federal and state courts. The practice includes federal district court, multidistrict litigation, arbitration and ITC Section 337 experience, and it most often serves AmLaw 100 firms and Fortune 1000 companies alongside the small and midsize businesses that make up much of the docket. Joseph Caruso, the firm's founder, CEO and CTO, holds the CISSP, CCE and EnCE credentials and has served as a consulting expert in patent litigation including Motorola Mobility v. Microsoft and Apple v. Samsung, and in Rogers v. BNSF Railway, the first Illinois Biometric Information Privacy Act class action to reach a jury. Veronica Perez leads the mobile and vehicle evidence work and Robert Knudsen leads computer forensics and cybersecurity examinations.
The engagement forms follow the litigation. We serve as a consulting expert who shapes the ESI protocol and tests the other side's report, as a testifying expert who authors the Rule 26 report and takes the stand, or as a neutral examiner appointed under a stipulated protocol. The services most often paired with these guides are digital forensics expert witness, computer forensics expert witness, mobile device forensics, audio, video and image authentication and neutral examinations. In every form the deliverable is written so that another examiner could repeat the work from the file, because that is the question Rule 702 asks and the question cross examination tests. GDF does not accept pro se litigation cases and may decline matrimonial or family law cases at its discretion.
How to Begin
The initial consultation is free. Call (800) 868-8189 or request a consultation online, and a senior examiner will ask about the sources in play, whether acquisition has already happened and how it was documented, the propositions counsel needs tested, whether an opposing report must be rebutted and whether the deliverable is a consulting memo, a Rule 26 report, a declaration or trial testimony. The answers determine scope, and the scope is written down before any work begins so counsel can see where the budget goes and what each phase will produce. Where the deadline is close, we say on the first call what can be done in the time available and what cannot.
Two resources are worth reading before that call. The digital forensics process guide walks a matter from the first question through preservation, examination and reporting to testimony, and the digital forensics FAQ answers the questions counsel most often ask about cost, timing and what a report contains. Counsel who want to inspect a disputed photograph or video before retaining an examiner can run it through the photo forensics tool or the video forensics tool, which surface metadata and structural indications without altering the file. None of these replaces an examination, and each one makes the first conversation shorter and more specific.