I have been meaning to do this for about a decade. Every year or so I would register something, sketch a plan, and then get pulled back into a matter that needed all of my attention. The site kept losing.
What changed is that I kept having the same conversations twice. A colleague asks how we handle a particular collection problem. Someone earlier in their career asks whether the certifications are worth it. A vendor demo raises a question I have already answered for myself three times. Writing it down once seems obviously better than explaining it again badly.
What will be here
Five rough categories, and I am not going to pretend they will stay tidy:
- The work itself — eDiscovery and digital forensics, the tooling, and the parts of the process that are harder than the vendors admit.
- Career — twenty years of what held up and what did not, including the qualifications that mattered and the ones that mostly did not.
- Business and strategy — how this function is bought, budgeted and justified inside a large organization.
- AI in this work — what it actually changes in an investigation, what it does not, and where the claims outrun the evidence.
- Everything else — occasional essays with no professional purpose whatsoever.
Who it is for
Mainly people who do this work, or are thinking about doing it. If you are outside the field entirely and curious what an investigation actually looks like from the inside, some of it should still make sense — I will try not to hide behind acronyms.
Two things I will not write about: anything specific to my employer, and anything specific to a matter. Neither is a hard limit on the interesting parts.
If something here is useful, or wrong, tell me.