CyForce

10/16/2026

Found on the phone doesn’t mean created on the phone.

A photo, document, video, or other file discovered on a device may not have originated there.

It could have arrived through a text message, email, cloud synchronization, shared account, download, backup, AirDrop, or a transfer from another device.

That distinction can matter.

Finding a file answers one question: Where was it found?

Determining where it came from is a different question entirely.

Digital forensic analysis looks beyond the presence of a file and examines the surrounding data that may help explain its origin and how it got there.

Presence is not the same as provenance.

Florida PI Agency License No. A3500021

10/06/2026

A software update can change more than the way your device works.

It can change the digital evidence it creates.

Phones, computers, vehicles, and other connected devices are constantly receiving software updates. Those updates can change how information is stored, which events are logged, how databases are structured, and what artifacts may be available for forensic examination.

That means two identical devices running different software versions may not necessarily leave behind the same digital trail.

For a forensic examiner, knowing what version was running at the time can be an important part of understanding the evidence.

Because in digital forensics, sometimes the software version is part of the story too.

Florida PI Agency License No. A3500021

09/30/2026

The Digital Alibi

“I wasn’t there.”

It sounds like a simple statement. Digital evidence can make the question much more interesting.

A phone, vehicle, smartwatch, computer, or other connected device may contain information that helps establish where that device was at a particular time.

But there’s an important distinction:

A device’s location is not automatically a person’s location.

A phone can be left behind. A vehicle can be driven by someone else. Devices and accounts can be shared.

That’s why location data shouldn’t be viewed in isolation. Multiple sources of digital evidence can sometimes help determine whether the pieces support each other—or tell very different stories.

The question isn’t simply, “Where does the phone say it was?”

It’s “What does all of the available digital evidence tell us?”

FL PI Agency License No. A3500021

09/24/2026

A lot of attorneys know us for vehicle infotainment forensics.

But that’s only part of what we do.

Our digital forensics work extends across cell phones, computers, wearables, smart devices, and the growing Internet of Things.

The same expertise we bring to vehicle data applies wherever digital evidence may be found.

Technology is everywhere. So is the potential for digital evidence.

So while vehicle infotainment forensics may be what we’re known for, think of us for the rest of your caseload, too.

If it stores, connects, or communicates, it may have a story to tell.

FL PI Agency License No. A3500021

09/16/2026

A preservation letter is only helpful if you know what evidence to ask for.

That can get tricky when a vehicle is involved.

Most people know that newer vehicles collect data, but it’s not always clear what information may be available, where it’s stored, or who may have access to it.

That’s where we can help.

Before you send a preservation letter, we can help identify what types of vehicle data may be important to your case and where that information may be found. This could include the infotainment system, connected phones, vehicle systems, or data held by other companies.

You don’t need to be an expert in vehicle technology to know what to ask for. That’s our job.

If you have a case involving a vehicle, reach out to us early. We can help you figure out what data may be available and what should be preserved before it’s too late.

FL PI Agency License No. A3500021

09/11/2026

09/01/2026

"Autopilot was on."

That's often one of the first things we hear after a collision involving a vehicle with advanced driver assistance features.

But from a forensic standpoint, that's usually just the beginning of the story.

The more important questions are:

When was the feature engaged?
Were there any alerts or warnings before the collision?
Did the driver respond?
Was there steering, braking, or acceleration input?
What was happening in the seconds leading up to impact?

Modern vehicles generate a significant amount of data, and reviewing the timeline can provide context that isn't available from witness statements alone.

For attorneys handling these cases, understanding the interaction between the driver and the vehicle's assistance systems can be just as important as knowing whether the feature was active.

The answer is rarely as simple as "it was on" or "it wasn't."

FL PI Agency License No. A3500021

08/26/2026

What's Happening Behind the Scenes?

Throughout August, we've been taking a closer look at the technology working behind the scenes of everyday devices. For our final post, we're exploring what really happens when you use Apple CarPlay or Android Auto.

Today, we're looking at what really happens when you use Apple CarPlay or Android Auto.

Many people assume the apps they see on the vehicle's screen are running inside the vehicle.

They're not.

Your phone continues running the navigation app, streaming the music, and handling your calls and messages. The vehicle's screen is simply displaying that information and sending your touches, voice commands, or steering wheel controls back to the phone.

Every time you skip a song, ask Siri for directions, or reply to a message using your voice, your phone processes the request and immediately sends the updated information back to the vehicle.

Understanding where that information is processed helps explain why both the phone and the vehicle can become important sources of digital evidence.

FL PI Agency License No. A3500021

08/20/2026

What's Happening Behind the Scenes?

As our August exploration of everyday technology continues, we're taking a closer look at one of the everyday processes that usually goes unnoticed. Understanding how these technologies work is often the first step to understanding the digital evidence they may create.

Today, let's explore how your phone knows it's entered a new time zone.

You land in another state or country, turn off airplane mode, and your phone updates to the correct local time almost immediately.

Once your phone reconnects to a cellular network, it receives information from nearby cell towers, including the local time and time zone. Your phone uses that information to update its clock automatically.

It also adjusts your calendar, alarms, reminders, and timestamps so everything continues working as expected.

If you're connected only to Wi Fi, your phone may use other information, such as your location, to determine the correct time zone.

Most people never think about it because it happens in seconds, but your phone is constantly working to make sure the time you're seeing is accurate wherever you are.

FL PI Agency License No. A3500021

08/17/2026

What's Happening Behind the Scenes?

Many of the features we use every day seem simple, but there's often much more happening behind the scenes than meets the eye. That's what makes modern technology so fascinating.

Today, we're taking a closer look at what happens when you share your location.

When you tap "Share My Location," your phone doesn't rely on GPS alone.

Instead, it combines information from several sources. GPS satellites help estimate where you are, nearby Wi Fi networks and cellular towers help refine that estimate, and in some situations Bluetooth signals can provide additional information.

Your phone compares all of those sources and determines the most accurate location it can before sending it through the app you're using.

As you move, it repeats this process over and over again, updating your location as often as the app requests.

That little blue dot on the map is actually the result of several different technologies working together.

FL PI Agency License No. A3500021