Case / exercise:
Intake date:
Accepted by:
Material
- origin (host, image, log)
- hash / size (if you compute it)
- working copy: yes / no — do not work on the only copy
- what was already touched before you
Observations (facts)
| Time | Artefact | Value | How you know |
|---|---|---|---|
Hypotheses (separate)
| Hypothesis | What would confirm | What would refute |
|---|---|---|
Gaps
What the material does not contain:
Conclusion
One sentence you can defend. If you cannot — write that you cannot.