Digital Evidence Object

Tools as object instruments

DEO Tools

This catalogue presents the practical tools as a continuation of the Digital Evidence Object view. Whether the material is a CSV export, a wallet transaction, a legal order, a public-source clue, or a risk record, the task is the same: identify and describe objects.

Download DEIC ZIP Object model

Catalogue

Each tool searches for objects

The attached HTML tools are not published as the raw resources/public_html directory. They are available here as DEO-styled web routes so their role in investigation, training, and evidence handling is clear.

English Local only

DEIC Local HTTP Service

A local Python service for reducing forensic CSV exports into candidate Digital Evidence Objects using Why, When, Where, What, Who, and HiD cues.

Input objects
CSV rows, file paths, timestamps, users, processes, sources.
Output objects
Ranked review rows with stage counts and reduction metrics.
Instructions and ZIP
English + Lithuanian Web tool

CryptoGuard Analyzer

Wallet and transaction analysis views for treating blockchain transfers as evidence objects, including incoming and outgoing transaction trees.

Input objects
Wallet addresses, transfers, transaction direction, value, time, and related addresses.
DEO lens
Transaction objects are grouped by actor, flow, timing, and direction.

The Lithuanian version is included in the reviewed source set; this web route uses the English analyzer.

Open CryptoGuard
Lithuanian Web tool

CyberFiRD Unified Risk Console v2.0

A cyber incident and risk console that can be read through DEO as a risk-object workspace: entities, obligations, incidents, controls, and decisions.

Input objects
Incident facts, regulatory criteria, system context, controls, and organizational risk signals.
DEO lens
Risk records become objects that connect cause, actor, impact, and response.

This web tool is presented with a Lithuanian interface.

Open CyberFiRD
Lithuanian Web form

EIPOS Production Order Certificate

A structured European Production Order certificate form for describing requested electronic evidence as object sets tied to authority, provider, identifiers, and legal basis.

Input objects
Requested data categories, provider identifiers, persons, accounts, time ranges, and procedural metadata.
DEO lens
The order defines which evidence objects should be produced and why they are relevant.

This web form is presented with a Lithuanian interface.

Open EIPOS
Lithuanian Web form

EISOS Preservation Order Certificate

A structured European Preservation Order certificate form for identifying electronic evidence objects that must be preserved before production or review.

Input objects
Data to preserve, service provider details, legal context, time limits, and authority metadata.
DEO lens
The preservation duty protects objects before they disappear, change, or become unavailable.

This web form is presented with a Lithuanian interface.

Open EISOS
Lithuanian Web worksheet

Blockchain Practice Worksheet

A training worksheet for open-source blockchain transaction search and analysis, reframed as object discovery across addresses, transfers, timelines, and conclusions.

Input objects
Addresses, transactions, explorers, values, times, and observed wallet relationships.
DEO lens
The exercise turns open-source observations into explainable transaction objects.

This web worksheet is presented with a Lithuanian interface.

Open worksheet
Lithuanian Web worksheet

GenAI Evidence Search Worksheet

A training worksheet for using GenAI during electronic evidence search and analysis while keeping the investigative target grounded in objects, sources, and validation.

Input objects
Email records, network rows, photo metadata, WHOIS/DNS signals, and generated prompts.
DEO lens
AI-assisted suggestions are treated as leads that must resolve back to verifiable objects.

This web worksheet is presented with a Lithuanian interface.

Open worksheet

Uniform rule

If we are looking, we are looking for objects

The catalogue deliberately uses the same vocabulary for different tools. A transaction, order section, incident record, CSV row, prompt finding, or public-source observation can all become a Digital Evidence Object when its attributes answer the case.

Object Attributes Source Time Actor Relationship