Collegeville, Pennsylvania · Montgomery County
About 4n6PI
A boutique digital forensics, investigations, and eDiscovery practice serving attorneys, corporate legal teams, and companies across Greater Philadelphia.
Small on purpose.
Large forensics firms solve the staffing problem by layering. A junior technician performs the collection, an analyst runs the tool, a manager reviews the output, and a senior name appears on the report. The work is often fine. But four people have touched the evidence, and the person who signs is not the person who did it.
4n6PI is built the other way. Every engagement is handled by the examiner who signs the report, from acquisition through findings. That constrains how many matters can run at once, which is the trade being made deliberately. It also means there is no version of a 4n6PI engagement where the question "who actually did this work" has a complicated answer.
The firm
4n6PI LLC
- Women-owned. Founded and owned by Jennifer Kritselis.
- Registered in Pennsylvania since April 2020. Entity No. 7054225.
- Principal examiner: James Kritselis. More than twenty years in digital forensics and incident response, working matters hands-on rather than supervising them.
- Based in Collegeville, Montgomery County. Collection performed in person across Greater Philadelphia, remotely nationwide.
Qualifications
Certifications and background
- EnCE. EnCase Certified Examiner. Subject matter expertise in EnCase Endpoint Investigator at enterprise scale, including deployment, upgrade, and recovery of environments that support live investigations.
- CFSR. Certified Forensic Smartphone Responder, covering acquisition and analysis of iOS and Android devices.
- Enterprise eDiscovery. Built a Microsoft Purview eDiscovery program from scratch at a global public company, from legal hold administration through custodian collection and export. Operator experience rather than vendor familiarity.
- Active casework. The practice runs on current matters, not on credentials earned once and maintained on paper.
How we work
What to expect, and what is out of scope
4n6PI works inside your existing environment on a per-matter basis, activated by written work authorization. There is no ongoing program to buy into and no platform to adopt.
- Findings are stated to the limit of the evidence. Where the data supports an indicator rather than a conclusion, the report says so.
- Each device is its own record. Findings from one device are never carried across to another without evidence connecting them.
- Methodology is documented to be repeatable. Another examiner working from the same source should reach the same result.
- Containment and remediation stay with you. On an incident, 4n6PI is the forensic specialist, not the response lead.
- Technical findings only. 4n6PI establishes what the evidence shows. What that means for your matter is your counsel's call, not ours.
Work with 4n6PI
The first conversation is free, takes about thirty minutes, and usually clarifies whether you need a collection now or a plan first.