Forensics
Report structure
This is the template every KillerWhale forensic engagement is delivered against. It is a structural example, not a real case.
Deliverable
What you receive
01
Engagement scope
The question asked, the boundaries agreed, and what was explicitly out of scope.
02
Evidence basis
Chains, block ranges, datasets and manifest identifiers used for the reconstruction.
03
Reconstruction method
How chain state was rebuilt, including normalization rules and determinism controls.
04
Fund flow reconstruction
The movement sequence with timing, structure and consolidation or dispersal behaviour.
05
Counterparty analysis
On-chain counterparties observed and the strength of each association.
06
Findings
What the evidence supports, graded by confidence and separated from interpretation.
07
Provenance appendix
Object identifiers, block heights, transaction identities and verification hashes.
08
Limitations
What could not be determined and why, stated plainly rather than smoothed over.
Reports describe technical blockchain evidence. They do not assert criminal liability, do not constitute legal advice, and do not promise asset recovery.