Direct collection (with login)
Acquisition using the subject's account credentials or a session cookie lifted from a seized device. Requires legal authorisation under BNSS Section 91 or a warrant; the chain of custody must explain how the credentials were obtained.