Ten thousand files. One ordered set.
Evidence triage takes a disclosure dump, a device extraction or a folder nobody has opened and organises it: duplicates collapsed, frames grouped by place and time, and the images worth a human hour surfaced first.
01What it returns
A ranked working set
The frames that carry recoverable signal, ordered by what they are likely to yield.
Grouping
Near-duplicates collapsed and remaining frames clustered by scene, place and capture window.
Cross-references
Results from the other solutions attached to each frame, so triage and analysis are one pass.
02How it reads the frame
01
Perceptual identity
Which frames are the same image, resized, recompressed or screenshotted.
02
Scene continuity
Which frames are the same place from a different angle or a different day.
03
Yield
Whether a frame carries enough to be worth an analyst opening it at all.
03Limits
Triage orders the queue. It does not decide what is relevant to an investigation.
Nothing is discarded. Deprioritised is not deleted.
04The rest of the set