Forensic Capture
Definition
Tool-based documentation of online content that records the URL, timestamp, and page hash alongside the visible content. Preferred over manual screenshots in court because it produces a verifiable audit trail. Tools include Hunchly, HTTrack, and certified web archiving services.
- Records
- URL, timestamp and page hash alongside visible content
- Example tools
- Hunchly, HTTrack, certified web archiving services
- Advantage over screenshots
- Produces a verifiable, independently checkable audit trail
- Applies to
- Online content: social media, web pages, forums
Common questions
Why is a screenshot alone considered weak evidence?+
A screenshot can be edited, cropped or staged with no independent way to verify when it was taken or what the page actually looked like at that moment, so opposing counsel can challenge its authenticity without a supporting technical record.
What does the page hash actually prove?+
The hash is a fixed-length value calculated from the captured page content. If the content changes even slightly, the hash changes too, so matching hashes on re-verification show the captured copy has not been altered since collection.
Related terms
- Account Attribution
- The process of linking a pseudonymous or anonymous online account to a real-world identity. Methods include IP log analysis, device fingerprinting, cross-platform...
- MLAT (Mutual Legal Assistance Treaty)
- A bilateral or multilateral treaty framework through which countries agree to provide legal cooperation in criminal investigations, including compelling disclosure of evidence...
- OSINT (Open-Source Intelligence)
- Intelligence gathered from publicly available sources without special legal authority. In social media investigation, OSINT covers all content visible to any user:...
- Preservation Request
- A formal letter sent to a platform asking it to freeze and retain specified account data pending formal legal process. Under 18...
- Stored Communications Act (SCA)
- Part of the US Electronic Communications Privacy Act (18 U.S.C. 2701-2712) that governs government access to stored electronic communications and data. It...