Add forensics section