Digital Forensics Consultancy

Digital forensics and intelligence services for organizations that need to know what's true.

Norn Dynamics helps legal, corporate, media, and compliance teams authenticate digital evidence, verify imagery and location data, and understand the networks and threats behind an event.

Analysts reviewing data on multiple monitors
Services

Four core practice areas

Each service can be engaged independently or combined into a single deliverable, depending on what the engagement requires.

Image & Media Forensics

Authentication and analysis of photo and video evidence, including manipulated and AI-generated media.

  • Photo and video authentication
  • Metadata and file-integrity analysis
  • Error level analysis and compression forensics
  • AI-generated and deepfake media detection
  • Reverse image search and source tracing
  • Geolocation verification from images and video
  • Shadow, landmark, and terrain matching
  • Timeline reconstruction from visual evidence

Geospatial & Satellite Verification

Satellite imagery analysis for site monitoring, compliance verification, and infrastructure assessment.

  • Satellite imagery corroboration
  • Change detection over time
  • Site and facility monitoring
  • Construction and infrastructure progress verification
  • Environmental and land-use compliance checks
  • Supply chain and facility risk mapping
  • Disaster and damage assessment support

Open-Source & Social Media Analysis

Mapping how information, accounts, and networks are connected, including coordinated or inauthentic activity.

  • Open-source data collection and verification
  • Social media intelligence (SOCMINT)
  • Coordinated inauthentic behavior detection
  • Bot and fake-account network mapping
  • Disinformation and narrative propagation analysis
  • Counterfeit and grey-market seller network mapping
  • Entity and beneficial-ownership research

Threat & Compliance Intelligence

Ongoing monitoring and one-time research to support security, brand protection, and compliance needs.

  • Dark web and threat-surface monitoring
  • Brand and executive digital exposure assessments
  • Vendor and third-party risk research
  • Compliance and know-your-business (KYB) research
  • IP infringement and counterfeit evidence packages
  • Litigation support research for legal teams
  • Fact-checking and content verification for publishers
Full Capability List

Every service, by discipline

A complete reference of the technical work we perform, organized by method.

Visual & Media Forensics

  • Image and video authentication
  • Metadata and EXIF analysis
  • Error level analysis (ELA)
  • Compression and artifact analysis
  • Deepfake and synthetic media detection
  • Reverse image and video search
  • Chain-of-custody documentation for media

Geolocation & GEOINT

  • Image and video geolocation
  • Shadow and sun-position analysis
  • Landmark and terrain matching
  • Satellite imagery corroboration
  • Change detection over time
  • Facility and site monitoring
  • Route and movement pattern mapping

SOCMINT & Network Analysis

  • Social media intelligence gathering
  • Network and link analysis
  • Coordinated inauthentic behavior detection
  • Bot and fake-account identification
  • Narrative and disinformation tracing
  • Sentiment and trend monitoring

Threat Intelligence

  • Dark web monitoring
  • Digital exposure assessments
  • Brand and IP infringement monitoring
  • Counterfeit and grey-market mapping
  • Physical and cyber threat surface reviews
  • Crisis and event monitoring

Compliance & Due Diligence

  • Entity and beneficial-ownership research
  • Know-your-business (KYB) research
  • Vendor and third-party risk research
  • Sanctions and public-record screening
  • ESG and supply-chain verification

Legal & Publisher Support

  • Litigation support research
  • Expert forensic report preparation
  • Fact-checking and content verification
  • Public-record and open-source research
  • Documentation for internal review or publication
Analyst reviewing verification results on screen
How We Work

Analysts, not just software

Every finding is reviewed by a person trained in the relevant method, cross-checked against independent sources, and documented so it holds up outside our report.

2+
Independent sources per finding
4
Core practice areas
100%
Sourced & documented reports
Our Process

A consistent, documented process

Every engagement follows the same four stages, so the resulting report can stand on its own.

01

Scope the request

We define the question being asked and what evidence or data is available to answer it.

02

Gather & corroborate

Findings are checked against multiple independent sources before they're included in a report.

03

Analyze

Our team applies the appropriate forensic or analytical method and documents each step taken.

04

Report

You receive a clear, sourced report with findings, methodology, and a confidence assessment.

Industries

Who we work with

Our services are used across a wide range of sectors that share a common need: verified, defensible information.

Insurance
Legal Services
Media & Journalism
Corporate Security
Brand & IP Protection
Financial Services
Real Estate & Construction
ESG & Sustainability
Nonprofits & NGOs
Political & Advocacy Groups
Higher Education
Entertainment & Media
Cybersecurity Firms
Government Contractors
Supply Chain & Logistics
Technology & Web3

Start with a scoping call

Tell us what you need to verify or understand. We'll tell you what's possible and what it takes.

Schedule a Consultation