MODLAN INTELLIGENCE RESOURCE · GUIDE
Web Evidence Beyond Screenshots
Why volatile online evidence benefits from source context, timestamps, hashes, metadata, version history, and documented derivatives.
A screenshot is a representation
A screenshot may show what was visible to a user, but it typically does not preserve the broader page structure, source context, underlying media, or a complete acquisition record.
The manifest matters
A defensible acquisition record identifies the source URL, capture time, collector, method, resulting artifacts, sizes, cryptographic digests, and later derivative lineage.
Format follows purpose
WARC can preserve web-archive structure, MHTML can preserve browser-readable page context, PDF can support review, and media files preserve audiovisual content. No single export format answers every evidentiary or archival need.
Integrity is not truth
Hash verification can establish that preserved bytes have not changed since the digest was created. It does not prove authorship, accuracy of the underlying statement, relevance, or admissibility.