Decoding Forensics