<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
  <title>D3Forensics Insights</title>
  <link>https://d3forensics.com/insights/</link>
  <atom:link href="https://d3forensics.com/feed.xml" rel="self" type="application/rss+xml"/>
  <description>Practical analysis of digital evidence matters from D3Forensics Limited, Hong Kong.</description>
  <language>en</language>
  <item>
    <title>Preserve First: The 72 Hours That Decide a Digital Evidence Matter</title>
    <link>https://d3forensics.com/insights/preserve-first.html</link>
    <guid>https://d3forensics.com/insights/preserve-first.html</guid>
    <pubDate>Sun, 05 Jul 2026 08:00:00 +0800</pubDate>
    <author>info@d3forensics.com (Alan Jeffries)</author>
    <description>Why early preservation decides matters, what decays fastest, and what to do instead of looking.</description>
  </item>
  <item>
    <title>Anatomy of a BEC: How the Quiet Mailbox Steals Your Invoices</title>
    <link>https://d3forensics.com/insights/bec-anatomy.html</link>
    <guid>https://d3forensics.com/insights/bec-anatomy.html</guid>
    <pubDate>Sun, 05 Jul 2026 08:00:00 +0800</pubDate>
    <author>info@d3forensics.com (Alan Jeffries)</author>
    <description>Intrusion, the silent watching period, the hidden rule, the strike: the fraud, evidenced.</description>
  </item>
  <item>
    <title>The Leaver Window: Employee Exits and the Forensics of Departure</title>
    <link>https://d3forensics.com/insights/leaver-window.html</link>
    <guid>https://d3forensics.com/insights/leaver-window.html</guid>
    <pubDate>Sun, 05 Jul 2026 08:00:00 +0800</pubDate>
    <author>info@d3forensics.com (Alan Jeffries)</author>
    <description>The collection arc before resignation, and the exit protocol that protects employers.</description>
  </item>
  <item>
    <title>WhatsApp as Evidence: What Survives, and What a Screenshot Cannot Prove</title>
    <link>https://d3forensics.com/insights/whatsapp-evidence.html</link>
    <guid>https://d3forensics.com/insights/whatsapp-evidence.html</guid>
    <pubDate>Sun, 05 Jul 2026 08:00:00 +0800</pubDate>
    <author>info@d3forensics.com (Alan Jeffries)</author>
    <description>Deletion, recovery, and why authentication is assembled rather than asserted.</description>
  </item>
</channel>
</rss>
