fatcousin
// case type

workplace harassment / hostile workplace

HR-grade preservation of slack/teams/email evidence with chain-of-custody, redactions, and timeline rebuilds.

tools
14
priority
M
processing
local · in browser

start here · primary tools

ordered. work top-down. the first tool is the suggested entry point for this case type.

  1. slack export analyzerdrop a Slack workspace export ZIP · browse channels · users · messages · DMs · file sharing activity · timeline · export CSV · runs locally
  2. slack export forensic analyzerdrop slack workspace export zip or individual channel json files · parse all messages files and users · reconstruct conversation threads · surface file sharing deleted message indicators and user activity patterns · runs locally
  3. microsoft teams export forensic analyzerdrop teams export zip or eDiscovery teams json export · parse messages channels and user activity · reconstruct conversation threads and meeting records · surface file sharing deleted messages and guest access events · runs locally
  4. slack desktop forensicsdrop slack app data files · parse conversations · channels · users · files · leveldb cache · sqlite databases · runs locally
  5. microsoft teams forensicsdrop teams app data files · parse messages · channels · users · calls · leveldb sqlite · runs locally
  6. email thread reconstructordrop multiple .eml files · Message-ID References In-Reply-To tree · missing parent flags · flat timeline · CSV export · runs locally
  7. email thread reconstructordrop multiple eml files or mbox · reconstruct conversation threads using message-id in-reply-to and references headers · visualize reply chains · surface missing messages in threads and identify thread hijacking · runs locally
  8. natural language writing sample authorship comparatordrop multiple text files or paste writing samples · compute 40 plus stylometric features · sentence length distribution · vocabulary richness · function word frequencies · punctuation patterns · produce similarity score with confidence intervals between samples · runs locally

also useful · secondary tools

supporting and follow-up tools. surface as the investigation widens.

  1. tracked changes forensic reconstructordrop docx file · extract all tracked insertions deletions and format changes · reconstruct the full editing history by author · surface deleted content and identify who removed what · runs locally
  2. office document revision history extractordrop docx xlsx pptx or odt file · extract full revision and version history metadata · reconstruct authorship timeline · surface who created modified and saved the document and when · runs locally
  3. document metadata inconsistency finderdrop docx xlsx pptx pdf · core app props vs pdf info · temporal author revision heuristics · tracked changes timeline · runs locally
  4. redaction quality verifierdrop pdf or image · text under redact · incomplete black boxes · canvas pixel scan · runs locally
  5. chain of custody gap detectorpaste custody log csv · time gaps over threshold · missing signatures · export findings csv · runs locally
  6. case report generatorfill in case number · examiner · dates · findings · drop evidence files for auto hash · generates structured forensic report PDF · runs locally
// case-kit pipeline

run as a stack

skip the click-through. these presets are curated forensic pipelines you can save as a stack with one click and run on your evidence locally.

  • workplace harassment — evidence kit

    9 steps

    drop Slack / Teams / email exports → thread reconstruct → authorship → tracked changes → custody gaps → redaction check → report

    1. 01evidence-manifest-generatorhash every export before parsing — HR investigations require chain-of-custody
    2. 02slack-export-forensic-analyzerparse Slack workspace export JSON
    3. 03teams-export-forensic-analyzerparse Microsoft Teams export content
    4. 04email-threading-reconstructorreconstruct email threads from .eml / mbox exports
    5. 05writing-sample-authorship-comparatorcompare writing style across messages if authorship is disputed
    6. 06tracked-changes-forensic-reconstructorreconstruct tracked changes in disputed documents
    7. 07chain-of-custody-gap-detectorflag gaps in the evidence preservation timeline
    8. 08redaction-quality-verifierverify redactions are complete before sharing with counsel
    9. 09case-report-generatordraft an HR/legal report with timeline + authorship findings
// pattern-matched

related tools

tools that the manifest-classifier flagged as plausibly useful here but that aren't in the hand-curated lists above. less editorial weight — scan, don't work top-down.

+ 7 more in this pattern match. browse the full forensics catalog via the forensics category.

ready