For North Carolina legal teams

Investigation support for attorneys

Find relevant facts, preserve public online material and organize the record around counsel’s question.

Assignments

Research, observation and preservation

  • Public posts, webpages, images and video with source context
  • Witness, party, address and contact research
  • Business, asset, property and relationship research
  • Lawful surveillance and activity documentation
  • Fraud, scam, impersonation and online-identity research
  • Attorney-directed benefits or disability fact research within licensed scope

Deliverables

A usable record

  • Source log and preservation notes
  • Chronology or relationship map
  • Surveillance report and media, where applicable
  • Concise investigative memorandum
  • Conflicting information, limits and unanswered questions

Preview the format

See a chronology and source index.

This two-page example uses invented events, dates and sources. It demonstrates format only; no investigation or collection occurred.

View the fictional report PDF
Illustration of source notes, a timeline and findings; not actual case evidence.
Illustration only · not case evidence

Counsel defines the assignment.

Agree on the question, jurisdiction, authorization, deadline, methods and recipients in writing. Reporting separates observations, source statements and analysis. Chain-of-custody procedures are used when required.

Credentials and relevant experience

Verify NC PI License No. 769469. Relevant professional experience includes digital forensics, technical e-discovery, evidence preservation and cybersecurity since 2013, with principal-level threat hunting since 2017.

Legal and benefits boundaries

DarkWater is not a law firm and provides no legal advice or VA-accredited claims representation. Counsel and the court determine evidentiary use; admissibility is not guaranteed. DarkWater makes no medical, disability, benefits-eligibility, coverage or legal determinations.

Share the objective, venue and deadline.

Fit, conflicts, jurisdiction and capacity are reviewed first. Keep privileged material, medical records, SSNs and confidential evidence out of public forms and initial emails.