HOW IT WORKS
From acquired evidence to review-ready records.
Qavryn follows a disciplined four-stage workflow. The product surfaces observed evidence; interpretation stays with the qualified examiner.
1. Ingest
Input: directory trees, ZIP or TAR archives, Cellebrite UFDR/UFD/UFDX, Magnet AXIOM Case.mfdb, raw and E01 disk images, and supported VM disk formats.
Outcome: the examiner opens the acquired scope without altering the evidence.
2. Recover
Outcome: available AI assistant and coding-agent activity is presented as source-linked records for review.
The examiner assesses the recovered material against the acquisition scope and the question at issue.
3. Review
Outcome: sessions, prompts and responses, tool calls, terminal commands, agent activity, timeline placement and provenance can be examined in the review workflow.
The examiner focuses the material, assesses context and records appropriate limitations.
4. Export
Outcome: JSON, CSV, an HTML report, a chain-of-custody manifest and eligible RSMF export support downstream review workflows.
The examiner selects the deliverable appropriate to the matter and retains responsibility for interpretation.
A focused conversation
Bring the AI-evidence question your team needs to answer.
We begin with your acquisition scope, review workflow and required deliverable.
Contact Qavryn →
Start a conversation