This document provides guidelines for forensic schedule analysis, including taxonomy, methodology, and protocols. It defines key terms and establishes a framework for analyzing project schedules, comprised of five layers: timing, basic methods, specific methods, basic implementation, and specific implementation. Minimum and enhanced protocols are described for validating source schedules and implementing different analysis methods, including observational and modeled approaches. The goal is to identify schedule delays and their causes in a standardized yet flexible manner.