Forensic Capture
Definition
Tool-based documentation of online content that records the URL, timestamp, and page hash alongside the visible content. Preferred over manual screenshots in court because it produces a verifiable audit trail. Tools include Hunchly, HTTrack, and certified web archiving services.
- Records
- URL, timestamp and page hash alongside visible content
- Example tools
- Hunchly, HTTrack, certified web archiving services
- Advantage over screenshots
- Produces a verifiable, independently checkable audit trail
- Applies to
- Online content: social media, web pages, forums
Common questions
Why is a screenshot alone considered weak evidence?+
A screenshot can be edited, cropped or staged with no independent way to verify when it was taken or what the page actually looked like at that moment, so opposing counsel can challenge its authenticity without a supporting technical record.
What does the page hash actually prove?+
The hash is a fixed-length value calculated from the captured page content. If the content changes even slightly, the hash changes too, so matching hashes on re-verification show the captured copy has not been altered since collection.
Related terms
- Account Attribution
- The process of linking a pseudonymous or anonymous online account to a real-world identity. Methods include IP log analysis, device fingerprinting, cross-platform...
- MLAT (Mutual Legal Assistance Treaty)
- A mutual legal assistance treaty provides a framework for participating states to request specified assistance in criminal matters. Requests depend on treaty...
- OSINT (Open-Source Intelligence)
- Open-source intelligence is information collected and evaluated from publicly accessible sources for a defined enquiry. Public availability does not guarantee accuracy, lawful...
- Preservation Request
- A formal letter sent to a platform asking it to freeze and retain specified account data pending formal legal process. Under 18...
- Stored Communications Act (SCA)
- Part of the US Electronic Communications Privacy Act (18 U.S.C. 2701-2712) that governs government access to stored electronic communications and data. It...