fatcousin
// case comparison

harassment vs whistleblower

HR intake says 'hostile workplace' but the timeline is ethics-hotline report → PIP → termination. harassment is comms preservation across Slack/Teams/email; retaliation is cross-correlation of Navex/EthicsPoint export with HCM adverse action. wrong case type means wrong export request to IT.

primary tools · side by side

ordered entry points from the case-type taxonomy. highlighted rows appear in both case types' editorial tool lists.

case a

workplace harassment / hostile workplace

HR-grade preservation of slack/teams/email evidence with chain-of-custody, redactions, and timeline rebuilds.

  1. 01slack export analyzerdrop a Slack workspace export ZIP · browse channels · users · messages · DMs · file sharing activity · timeline · export CSV · runs locally
  2. 02slack export forensic analyzerdrop slack workspace export zip or individual channel json files · parse all messages files and users · reconstruct conversation threads · surface file sharing deleted message indicators and user activity patterns · runs locally
  3. 03microsoft teams export forensic analyzerdrop teams export zip or eDiscovery teams json export · parse messages channels and user activity · reconstruct conversation threads and meeting records · surface file sharing deleted messages and guest access events · runs locally
  4. 04slack desktop forensicsdrop slack app data files · parse conversations · channels · users · files · leveldb cache · sqlite databases · runs locally
  5. 05microsoft teams forensicsdrop teams app data files · parse messages · channels · users · calls · leveldb sqlite · runs locally
  6. 06email thread reconstructordrop multiple .eml files · Message-ID References In-Reply-To tree · missing parent flags · flat timeline · CSV export · runs locally
  7. 07email thread reconstructordrop multiple eml files or mbox · reconstruct conversation threads using message-id in-reply-to and references headers · visualize reply chains · surface missing messages in threads and identify thread hijacking · runs locally
  8. 08natural language writing sample authorship comparatordrop multiple text files or paste writing samples · compute 40 plus stylometric features · sentence length distribution · vocabulary richness · function word frequencies · punctuation patterns · produce similarity score with confidence intervals between samples · runs locally
case b

whistleblower / retaliation investigation

ethics hotline report followed by adverse employment action. evidence spans Navex/EthicsPoint/Allvoices exports + HCM termination/promotion logs + HRSD case files.

  1. 01navex ethics hotline export forensic analyzerdrop navex export · parse report + category + user · runs locally
  2. 02ethics retaliation pattern detectordrop ethics export · detect retaliation patterns · runs locally
  3. 03ethics unauthorized case dismissal detectordrop ethics export · detect unauthorized case dismissals · runs locally
  4. 04cross ethics hcm retaliation correlatordrop ethics + hcm exports · correlate report to employment action · runs locally
  5. 05hr acuity investigation export forensic analyzerdrop hr acuity export · parse case + allegation + user · runs locally
  6. 06cross er hrsd case correlatordrop er + hrsd exports · correlate investigation to service case · runs locally
  7. 07servicenow hrsd case export forensic analyzerdrop servicenow hrsd export · parse case + task + user · runs locally
  8. 08case report generatorfill in case number · examiner · dates · findings · drop evidence files for auto hash · generates structured forensic report PDF · runs locally

editorial overlap

4 tools mapped to both case types in the editorial taxonomy — useful when the investigation spans both surfaces.
fatcousin cross export ioc hash correlatorfatcousin multi tool super timeline correlatorhr acuity investigation export forensic analyzernavex ethics hotline export forensic analyzer

lean toward…

disambiguation signals derived from case-type descriptions and common practitioner confusion points.

lean toward harassment if you see…

  • sustained hostile Slack/Teams/email thread pattern needing authorship comparison — no Navex or EthicsPoint case ID in correlated export
  • standalone comms preservation request without ethics-hotline report timestamp in the intake timeline
  • writing-sample authorship comparator artifacts across messaging exports — not hotline-to-adverse-action correlation

lean toward whistleblower if you see…

  • Navex, EthicsPoint, or Allvoices report timestamp in hotline export
  • demotion, PIP, or termination logged in HCM or HRSD shortly after ethics case disposition
  • cross-ethics-hcm retaliation pattern — adverse employment action correlated to hotline report, not standalone hostile comms thread
ready