Skip to main content
Print

How to Archive Web Pages and Social Media Posts So They Hold Up as Evidence

Web pages and social media posts can be edited, deleted, restricted, mislabeled, or removed without warning. A screenshot may preserve what appeared on a screen, but it rarely preserves enough information to establish who published the content, when it appeared, whether it was complete, or whether the image was later altered. EpsteinWiki contributors should capture digital material through a documented process that preserves content, context, provenance, metadata, and chain of custody.

Snapshot

ElementMinimum Standard
Evidence identifierAssign a unique internal evidence number
Original addressRecord the complete public URL
Account identityRecord the display name, handle, and stable account identifier when available
Capture timeRecord the date, time, and time zone
ContentPreserve the complete text, images, video, audio, and visible attachments
ContextCapture the surrounding thread, page title, profile, captions, and relevant replies
Native filePreserve the original downloaded file when lawfully available
ScreenshotCapture the full screen with the address and identifying information visible
Page archiveCreate an independent archive link when the service can capture the page
Web archive filePreserve a WARC or WACZ capture when appropriate
Integrity recordGenerate and record a SHA 256 hash for important files
Custody logRecord who captured, transferred, reviewed, copied, or modified the evidence
Working copiesKeep annotations, redactions, and conversions separate from the original
Privacy reviewProtect survivors, minors, witnesses, and private people
PublicationPublish only the material required to support the claim
Legal statusDo not claim that a capture is automatically admissible in court

What “Hold Up as Evidence” Means

No capture method guarantees that a court, government agency, journalist, or editor will accept an archived page as authentic or admissible.

In the United States, Federal Rule of Evidence 901 generally requires enough evidence to support a finding that an item is what the person offering it claims it is. Authentication may involve witness knowledge, distinctive characteristics, public records, or evidence explaining an accurate process or system.

Federal Rule of Evidence 902 describes certain records that may be authenticated through certification, including records generated by an electronic process and data copied from an electronic device, storage medium, or file.

Authentication does not resolve every legal issue. Evidence may still face questions involving hearsay, relevance, privacy, privilege, completeness, prejudice, or the method used to obtain it.

For EpsteinWiki, a strong digital archive should allow another researcher to answer:

  • What was captured?
  • Where did it appear?
  • Who appeared to publish it?
  • When was it captured?
  • How was it captured?
  • What surrounding context was visible?
  • Was the original file preserved?
  • Has the archived file changed?
  • Who handled it after capture?
  • What limitations remain?

Why Screenshots Alone Are Weak Evidence

A screenshot can be useful, but it usually captures only pixels.

A screenshot may omit:

  • The complete URL
  • The account’s stable identifier
  • The date and time
  • The time zone
  • Earlier messages
  • Later replies
  • Edit history
  • Deleted portions
  • Attached files
  • Video or audio
  • Interactive content
  • Page source information
  • File metadata
  • Redirects
  • The method used to produce the image

Screenshots can also be cropped, rearranged, edited, fabricated, or generated through a replica interface.

A screenshot should normally be one component of a larger evidence package. Preserve the original page address, independent archive, full context, capture notes, native media, and integrity information whenever possible.


The Evidence Package

A complete digital evidence package may contain:

  1. An evidence intake record
  2. The original URL
  3. A full page screenshot
  4. Detail screenshots
  5. A saved PDF
  6. A screen recording
  7. A WARC or WACZ capture
  8. An independent archive link
  9. Original media files
  10. Available metadata
  11. A text transcription
  12. A SHA 256 hash for each important file
  13. A custody log
  14. A research note explaining context and limitations
  15. A separate public copy with necessary redactions

Not every page requires every format. Material involving a serious allegation, likely deletion, disputed identity, or potential legal use requires stronger preservation than a routine public reference.


Before Capturing Anything

Determine whether the material can be lawfully and ethically preserved.

Ask:

  • Is the page publicly accessible?
  • Does access require an account?
  • Does it belong to a private group?
  • Was the contributor authorized to view it?
  • Does it contain survivor information?
  • Does it identify a minor?
  • Does it contain medical or financial information?
  • Does it contain intimate imagery?
  • Is the material sealed or protected?
  • Could downloading it expose a source?
  • Could the page contain malicious files?
  • Is there an immediate deletion risk?
  • Is legal or security review required?

Do not bypass passwords, access controls, paywalls, private group restrictions, or account permissions. Do not impersonate another person to obtain access.

Authorization to view a private page does not automatically create authorization to publish it.


Step by Step Archiving Process

Step 1: Assign an Evidence Identifier

Create a unique identifier before processing the material.

A consistent format may include:

  • Project abbreviation
  • Year
  • Evidence type
  • Sequential number

Example:

EW 2026 WEB 00427

Use the same identifier for the intake record, original files, hashes, working copies, and custody log.

Step 2: Record the Original URL

Copy the complete URL from the browser address bar.

Record:

  • Original URL
  • Redirected URL
  • Shortened URL
  • Platform
  • Domain
  • Page title
  • Post identifier
  • Account handle
  • Stable account identifier when available

Do not rely on a hyperlink label. The visible words may point to a different address.

Step 3: Record the Capture Time

Record the date and time immediately.

Include:

  • Local date
  • Local time
  • Local time zone
  • Coordinated Universal Time
  • Time displayed by the platform
  • Whether the platform uses a relative label such as “2 hours ago”

A relative time label becomes less useful after the capture. Record the corresponding exact time when it can be determined reliably.

Step 4: Identify the Capturer

Record:

  • Name or authorized contributor identifier
  • Role
  • Device type
  • Operating system
  • Browser
  • Browser version when available
  • Capture tool
  • Capture tool version
  • Network circumstances when relevant

This information helps another person explain how the capture was created.

Step 5: Capture the Full Screen

Take an initial screenshot showing:

  • Browser address bar
  • Page title
  • Account name
  • Account handle
  • Post date
  • Post text
  • Visible media
  • Relevant platform controls
  • Current date and time when practical

Do not crop the original screenshot.

Create cropped or enlarged copies later and label them as working copies.

Step 6: Capture the Complete Page or Thread

Scroll through the material and preserve:

  • Full post
  • Captions
  • Attached media
  • Quoted posts
  • Parent posts
  • Relevant replies
  • Thread sequence
  • Edit labels
  • Community notes
  • Visible engagement counts
  • Link previews
  • Publication date
  • Account profile information relevant to authentication

A screen recording can document scrolling, opening attachments, expanding text, and moving through a thread.

Step 7: Save the Page in Additional Formats

When possible, preserve more than one representation:

  • Full page screenshot
  • Browser generated PDF
  • Web archive file
  • Independent archive link
  • Original HTML or page resources
  • Screen recording
  • Text transcription

Different formats preserve different information. A PDF may preserve readable text but omit interactive content. A screenshot may preserve appearance but not underlying data. A WARC file may preserve page resources but still miss content loaded through protected scripts.

Step 8: Preserve Original Media

When lawfully available, preserve original photographs, video, audio, documents, and other attachments separately.

Record:

  • Media URL
  • File name
  • File format
  • File size
  • Resolution
  • Duration
  • Available metadata
  • Date downloaded
  • Relationship to the post

Do not use a screen recording as the only copy of an important video when the original file can be preserved lawfully.

Step 9: Create an Independent Archive

Submit the public URL to a reputable web archiving service when the page can be captured.

Possible services include:

Record the resulting archive URL and capture date.

An archive failure should also be noted. Social platforms may block crawlers, require login, load content dynamically, or prevent media capture.

Step 10: Generate Integrity Hashes

Generate a SHA 256 hash for significant original files.

Record:

  • Evidence identifier
  • File name
  • File size
  • Hash method
  • Complete hash value
  • Date generated
  • Person or system generating it

Generate a new hash after a meaningful transfer when chain of custody verification is required.

A matching hash can show that two files are identical at the byte level. It does not prove that the file was authentic when first captured.

Step 11: Preserve the Original

Mark the first preserved files as originals and restrict editing.

Do not:

  • Add arrows
  • Change brightness
  • Crop
  • Resize
  • Compress
  • Remove metadata
  • Convert formats
  • Add watermarks
  • Rename the only copy
  • Reconstruct missing content

Create separate working copies for analysis and public copies for publication.

Step 12: Begin the Custody Log

Record every meaningful event involving the evidence.

The log should state:

  • Date and time
  • Person
  • Action
  • File involved
  • Source location
  • Destination
  • Reason
  • Hash verification
  • Changes made
  • Result

Continue the log throughout review, transfer, redaction, publication, correction, and archival storage.


Required Capture Record

Use a consistent record for every important web item.

FieldRequired Information
Evidence IDUnique EpsteinWiki evidence identifier
Captured byContributor name or approved identifier
Capture dateMonth, day, and year
Capture timeExact time and time zone
Coordinated Universal TimeNormalized capture time
PlatformWebsite or social media service
Original URLComplete source address
Final URLAddress after redirects
Page titleExact visible title
Account nameDisplay name shown
Account handleUsername or handle
Account IDStable platform identifier when available
Post IDUnique post or content identifier
Claimed publication timeTime displayed by the platform
Content typePage, post, image, video, audio, comment, or thread
Capture methodsScreenshot, PDF, WARC, WACZ, video, or other method
Archive URLIndependent archived copy
Original file namesNames of preserved files
Hash valuesSHA 256 values
Context capturedReplies, thread, profile, quoted material, and attachments
Privacy statusPublic, restricted, redacted, or protected
LimitationsMissing elements, crawler failure, login requirement, or uncertainty
Custody locationApproved storage location

Web Archive Formats

WARC

The Library of Congress WARC format description explains that the Web ARChive format combines multiple digital resources and related information into an archival file.

A WARC may preserve:

  • Page responses
  • Images
  • Style files
  • Scripts
  • Metadata
  • Request information
  • Capture information
  • Related resources

WARC is widely used for institutional web archiving and is standardized as ISO 28500.

WACZ

A WACZ file packages web archive content and related indexes into a ZIP based format. The Library of Congress WACZ description identifies it as a packaged format for web archive content and metadata.

WACZ files can make captured content easier to move and replay while retaining the underlying web archive records.

PDF

A PDF is useful for reading, citation, and printing. It may not preserve embedded media, page behavior, complete metadata, or dynamically loaded content.

Screenshots

Screenshots preserve visible appearance at a particular moment. They should be retained at their original resolution and accompanied by capture records.

Screen Recordings

A screen recording can show navigation, scrolling, timestamps, expanded sections, and video playback. It should begin with the complete URL and show the steps taken to reach the content.


Using Independent Archive Services

Internet Archive Wayback Machine

The Wayback Machine Save Page Now service allows users to request preservation of many publicly accessible pages.

Record:

  • Original URL
  • Archive URL
  • Archive timestamp
  • Whether media loaded
  • Whether the page was complete
  • Whether the capture can be replayed

A Wayback Machine capture is valuable independent corroboration, but it may not preserve every script, image, video, comment, or protected page.

Perma.cc

Perma.cc creates preservation records intended to reduce link loss. It is operated by the Library Innovation Lab at Harvard Law School.

Perma records may be especially useful when preserving sources cited in legal, academic, and institutional work. Access and account features may differ according to user or sponsoring organization.

Limits of External Archives

External archives may:

  • Exclude private pages
  • Miss dynamically loaded material
  • Fail to capture video
  • Save only the login screen
  • Respect exclusion requests
  • Experience delays
  • Preserve a page after it changed
  • Become temporarily unavailable
  • Capture a regional version
  • Omit comments or replies

Always inspect the resulting archive. Do not assume success merely because an archive URL was generated.


Capturing Social Media Posts

A social media evidence record should preserve more than the post text.

Capture:

  • Platform
  • Display name
  • Handle
  • Stable account identifier
  • Profile URL
  • Post URL
  • Post identifier
  • Publication date
  • Publication time
  • Time zone
  • Exact text
  • Images
  • Video
  • Audio
  • Captions
  • Alt text when available
  • Quoted posts
  • Parent post
  • Relevant replies
  • Edit indicator
  • Visible engagement counts
  • Community labels or notes
  • Archive date
  • Capture method

Engagement counts change. Record them as observations at the capture time, not permanent facts.


Capture the Account Context

When authorship or identity matters, preserve relevant portions of the account profile.

This may include:

  • Display name
  • Handle
  • Platform identifier
  • Biography
  • Profile image
  • Header image
  • Account creation date
  • Verification status
  • Linked website
  • Relevant historical posts
  • Public location claim
  • Name changes when documented
  • Platform labels

A profile page does not prove who operated the account. Authentication may require prior posts, linked websites, direct confirmation, distinctive knowledge, platform records, or testimony from someone familiar with the account.

Do not collect unrelated personal information.


Threads, Replies, and Quoted Posts

A post can become misleading when removed from its conversation.

Preserve:

  • The first post in the thread
  • The post immediately before the relevant statement
  • The relevant statement
  • The next post when it clarifies meaning
  • Quoted or reposted material
  • Visible corrections
  • Relevant replies
  • Deleted post notices
  • Publication order

Number the items in the order they appeared.

Do not combine separate posts into one quotation without clearly indicating the separation.


Edited and Deleted Posts

Edited Posts

If a platform marks a post as edited:

  • Capture the current version
  • Capture available edit history
  • Record the edit label
  • Record the capture time
  • Search for earlier archives
  • Compare quoted or embedded copies
  • Preserve each verified version separately

Do not claim what changed unless an earlier version has been located.

Deleted Posts

If a post has been deleted:

  • Preserve the original archive
  • Record when deletion was first observed
  • Capture the deletion notice or unavailable page
  • Search reputable archives
  • Check quoted reposts
  • Check lawful cached copies
  • Preserve related responses
  • Avoid presenting an unverified screenshot as conclusive

Deletion does not prove that the original content was false, true, regretted, or removed by the author. State only that the content was no longer publicly available when checked.


Video and Live Streams

For video evidence, preserve:

  • Original page URL
  • Channel or account
  • Video title
  • Description
  • Publication date
  • Duration
  • Complete recording when lawfully available
  • Relevant timestamps
  • Captions
  • Transcript
  • Thumbnail
  • Comments when relevant
  • Archive link
  • Technical metadata
  • File hash

For a live stream, record:

  • Start time
  • End time
  • Time zone
  • Platform
  • Account
  • Whether the recording began after the stream started
  • Interruptions
  • Missing portions
  • Whether the platform later replaced the recording

Do not rely only on a short clip when the complete recording is available. Review what occurred before and after the excerpt.


Images and Photographs

Preserve the highest quality lawfully available version.

Record:

  • Source page
  • Direct media URL
  • File name
  • Dimensions
  • File size
  • Format
  • Available metadata
  • Caption
  • Upload date
  • Capture date
  • Associated account
  • Hash value

Do not alter the original image.

Create separate copies for:

  • Cropping
  • Enlargement
  • Annotation
  • Color adjustment
  • Redaction
  • Publication compression

Every altered copy should identify what was changed.

A photograph appearing on an account does not prove that the account owner created it or that the caption is accurate.


Metadata

Metadata may help establish:

  • File creation time
  • Modification time
  • Device model
  • Software
  • Dimensions
  • Duration
  • Geographic coordinates
  • Author
  • File history
  • Encoding
  • Platform processing

Social platforms often remove or replace original metadata. The absence of metadata does not prove manipulation.

Metadata can also expose:

  • Survivor identities
  • Home locations
  • Device information
  • Usernames
  • Organization names
  • Internal file paths
  • Editing history

Preserve original metadata in restricted evidence records. Remove sensitive metadata only from a separate publication copy.

Follow the Metadata Extracts guide.


Cryptographic Hashes

A cryptographic hash is a value calculated from a file’s exact contents.

EpsteinWiki should use SHA 256 for significant digital evidence unless a technical or legal requirement specifies another method.

If one byte changes, the resulting hash will normally change.

Hashes can help demonstrate:

  • The original file remained unchanged
  • A transfer produced an identical copy
  • A working copy differs from the original
  • Two researchers possess the same file
  • A published copy matches an archived version

Hashes do not prove:

  • Who created the file
  • Whether the content is true
  • Whether the file was manipulated before capture
  • Whether the account belonged to the claimed person
  • Whether the capture was lawful
  • Whether the evidence is admissible

Record the hash with the evidence, not only inside the file being hashed.


Chain of Custody

A chain of custody is the chronological history of the evidence after capture.

A custody log should identify:

Date and TimePersonActionSourceDestinationHash ResultNotes
September 6, 2026, 2:15 p.m. Eastern TimeContributor IDOriginal capturePublic URLRestricted evidence folderSHA 256 recordedFull page captured
September 6, 2026, 2:32 p.m. Eastern TimeContributor IDWorking copy createdOriginal fileReview folderDifferent hash expectedPersonal information redacted
September 6, 2026, 4:10 p.m. Eastern TimeEditor IDVerificationReview folderNo transferHash matchedCompared with archive copy

Do not leave unexplained gaps. If a file was received from another person, record what that person said about its origin and what remains unverified.

See the Chain of Custody Evidence guide.


Original, Working, and Public Copies

Original Copy

The original copy should remain unchanged and access restricted.

Working Copy

The working copy may contain:

  • Notes
  • Highlights
  • Transcriptions
  • Enlargements
  • Translations
  • Annotations
  • Analytical labels

Label it clearly as a working copy.

Public Copy

The public copy may contain necessary:

  • Redactions
  • Cropping
  • Compression
  • Watermarks
  • Captions
  • Explanatory labels

The public copy should remain traceable to the preserved original through its evidence identifier and custody record.


Authentication Factors

A strong authentication record may include several independent factors.

FactorExample
Direct observationThe contributor personally opened and captured the public page
Original URLThe capture records the complete platform address
Account historyOlder posts, linked websites, and public records connect the account to the claimed person
Distinctive contentThe post contains information consistent with authenticated records
Independent archiveA preservation service captured the same content
Witness confirmationA person with knowledge confirms the page or post
Platform recordsData supplied by the platform identifies the account or post
Native fileThe original media file is preserved
MetadataTechnical information supports the capture history
HashThe preserved file has remained unchanged
Documented processThe capturer can explain the tools and steps used
CorroborationOther records support the content or timing

The strength comes from the combined record, not a single technical feature.


Best Evidence and Duplicates

Federal Rule of Evidence 1002 addresses circumstances in which an original writing, recording, or photograph is required to prove its contents.

Federal Rule of Evidence 1003 states that a duplicate is generally admissible to the same extent as an original unless a genuine question is raised about authenticity or admitting the duplicate would be unfair.

How these rules apply to a specific web capture depends on the facts, jurisdiction, purpose, and available evidence.

Preserving the most original form available, documenting the capture process, and maintaining a clear custody history gives later reviewers more information to evaluate the record.


Corroborating an Archived Page

An archived page proves that certain content appeared in the capture. It does not necessarily prove that every statement on the page is true.

Seek corroboration through:

  • Other archive services
  • Independent screenshots
  • Original media
  • Platform embeds
  • Replies quoting the post
  • News reports created before deletion
  • Court filings
  • Government records
  • EFTA documents
  • Witnesses
  • Email notifications
  • Public statements
  • Related account activity
  • Platform data requests obtained through lawful processes

Several reposts based on the same screenshot are not independent corroboration.


Common Capture Failures

Missing Address Bar

Without the URL, the screenshot may be difficult to connect to a source page.

Cropped Identity

A capture may show text but omit the account handle or publication date.

Missing Context

A reply may appear to say something different when the parent post is absent.

Relative Time Only

“Yesterday” or “3 hours ago” becomes ambiguous later.

No Original File

A compressed screenshot may be the only surviving copy.

Archive Not Checked

The archive may contain a login page, error message, or incomplete content.

Media Not Preserved

The archived page may omit the photograph, video, or audio central to the claim.

Original Modified

Annotations or redactions may be applied directly to the only preserved file.

No Custody Record

Later reviewers may not know who created or changed the file.

No Privacy Review

The archive may expose a survivor, minor, address, telephone number, or account recovery information.


Dynamic and Personalized Pages

Websites may display different content according to:

  • Account
  • Location
  • Language
  • Device
  • Browser
  • Subscription
  • Prior activity
  • Personalization
  • Test group
  • Time
  • Login status

Record relevant circumstances.

When practical:

  • Capture the page while logged out
  • Record whether an account was used
  • Record the displayed language
  • Record the apparent region
  • Note personalization
  • Compare another browser or device
  • Capture the mobile and desktop versions when materially different

Do not claim that every user saw the same page.


Private Groups and Restricted Content

Private group content requires heightened caution.

Before capture, confirm:

  • The contributor was authorized to access the group
  • The capture does not violate a legal restriction
  • Publication serves a legitimate public interest
  • Survivor and member identities are protected
  • Group rules and expectations have been considered
  • Legal review has occurred when necessary

Do not join a private group under false pretenses or use another person’s account.

A member’s lawful access does not automatically authorize mass collection, republication, or exposure of other members.


Survivors, Witnesses, and Minors

Do not preserve more sensitive information than necessary.

Before sharing or publishing a capture, review for:

  • Survivor names
  • Minor identities
  • Usernames
  • Profile photographs
  • Home addresses
  • School names
  • Family relationships
  • Medical information
  • Sexual history
  • Telephone numbers
  • Email addresses
  • Account identifiers
  • Geographic metadata
  • Private messages
  • Faces in the background
  • Reflections
  • Notifications visible on screen
  • Browser tabs
  • Download folder names

Preserve the restricted original when lawful and necessary. Create a separately redacted public copy.

Do not attempt to identify a redacted survivor or minor through other pages.


Illegal Exploitation Material

If a page appears to contain child sexual abuse material, do not download, screenshot, copy, forward, upload, or circulate it.

Stop the ordinary archiving process.

Preserve only noncontent location information when it is safe and lawful to do so, such as:

  • Platform
  • Public URL
  • Account identifier
  • Date and time observed

Report the material through the appropriate platform and authorized reporting channel.

Do not place suspected illegal material in EpsteinWiki storage or send it to other contributors for confirmation.


Security Risks During Capture

A page may contain malicious downloads, tracking systems, credential prompts, or attempts to identify visitors.

Before visiting a suspicious source:

  • Conduct a risk assessment
  • Use an updated device and browser
  • Avoid administrator accounts
  • Do not open unexpected downloads
  • Do not enter credentials after following an unfamiliar link
  • Verify the domain
  • Avoid installing software
  • Record redirects
  • Use an approved isolated research environment when necessary
  • Ask a security reviewer for assistance

Do not sacrifice contributor safety to preserve a page.


File Naming

Use descriptive names without exposing protected identities.

A useful structure is:

EW2026_WEB00427_original_20260906T181500Z.png

A working copy might be:

EW2026_WEB00427_working_redacted_v01.png

A public copy might be:

EW2026_WEB00427_public_v01.png

Do not include a survivor’s name, a protected minor’s name, a confidential source, or sensitive allegations in a public file name.


Storage and Backup

Store evidence in an approved location with:

  • Individual user accounts
  • Restricted permissions
  • Multifactor authentication
  • Encryption
  • Version history
  • Backup
  • Audit information
  • Retention rules
  • Recovery procedures

Do not rely on:

  • One volunteer’s personal device
  • A public folder
  • An unencrypted portable drive
  • A temporary message attachment
  • A social media draft
  • A single external archive
  • A link that may expire

At least one protected backup should be stored separately from the primary evidence collection.


Publishing Archived Evidence

Publication should include only what readers need to verify the relevant claim.

A citation should identify:

  • Author or account
  • Page or post title
  • Platform
  • Publication date
  • Original URL
  • Archive URL
  • Access date
  • Evidence identifier when appropriate
  • Relevant timestamp for video or audio

If the original is gone, say so:

The original post was no longer publicly available when checked on September 6, 2026. EpsteinWiki reviewed an archived capture created on August 22, 2026.

Do not imply why a post disappeared unless the reason is documented.


Corrections and Updated Captures

Web content can change after publication.

When a material change is found:

  1. Capture the new version.
  2. Assign or connect the correct evidence identifier.
  3. Record the new capture date.
  4. Compare the versions.
  5. Preserve both versions.
  6. Update the custody log.
  7. Correct the EpsteinWiki article when necessary.
  8. Explain any material change in the editorial record.

Do not replace the earlier capture and destroy the evidence of change.


Final Archiving Checklist

Before relying on an archived page or social media post, confirm that:

  • A unique evidence identifier was assigned
  • The complete original URL was recorded
  • Redirects were recorded
  • The account display name was captured
  • The account handle was captured
  • A stable account identifier was recorded when available
  • The post identifier was recorded
  • The page title was preserved
  • The capture date was recorded
  • The capture time and time zone were recorded
  • Coordinated Universal Time was recorded
  • The full screen was captured
  • The address bar is visible in at least one original screenshot
  • The complete post or page was preserved
  • Relevant thread context was captured
  • Quoted posts were preserved
  • Replies affecting meaning were preserved
  • Edit labels were recorded
  • Engagement counts were treated as time specific observations
  • Original media was preserved when lawful
  • A PDF was created when useful
  • A screen recording was created when necessary
  • A WARC or WACZ capture was considered
  • An independent archive was created
  • The archive result was opened and checked
  • Original files remain unchanged
  • Working copies are clearly labeled
  • Public copies are separately redacted
  • SHA 256 hashes were recorded for significant files
  • The custody log is current
  • Authentication factors were documented
  • Important claims were independently corroborated
  • Private access controls were not bypassed
  • Survivor and witness information was reviewed
  • Minor identities remain protected
  • Sensitive metadata was removed only from public copies
  • Illegal content was not downloaded or circulated
  • The publication explains relevant limitations
  • The capture is not described as automatically admissible

Questions

Is a screenshot enough to prove that someone published a post?

Usually not by itself. Preserve the URL, account information, time, context, independent archive, original media, and capture process.

Does an archive link prove that the content is true?

No. It may help prove that particular content appeared in an archived capture. The underlying claim still requires verification.

Can a screenshot be edited without obvious signs?

Yes. Text, dates, account names, engagement counts, and images can be changed convincingly.

Should the browser address bar appear in the screenshot?

Yes, in at least one original capture. Additional screenshots may focus on content details.

What if the complete URL contains tracking information?

Preserve the original complete URL in the restricted evidence record. A cleaned canonical URL may be used in the public citation when it leads to the same content.

What if the post displays only “yesterday”?

Record the capture time and determine the exact publication time through the platform, page data, archive, or other reliable evidence when possible.

Should engagement counts be included?

They may be captured when relevant, but they should be described as the counts visible at a particular time.

Does deleting a post prove guilt?

No. A post may be removed by the author, platform, administrator, account compromise, legal request, or automated moderation. Do not speculate about the reason.

Can an archive service capture private posts?

Many cannot. Do not bypass privacy controls to force a capture.

Is a PDF better than a screenshot?

It preserves different information. A strong evidence package may contain both.

What is a WARC file?

A WARC is a standardized web archive format that can store captured web resources and related metadata.

What does a SHA 256 hash prove?

It can show that a file has not changed since the recorded hash was generated. It does not prove the original content was authentic or true.

Should the original image be redacted?

No. Preserve the lawful original in restricted storage and make a separate redacted public copy.

Can EpsteinWiki publish content from a private group?

Only after authorization, public interest, privacy, safety, and legal concerns have been reviewed.

Can a contributor use another person’s login to capture a page?

No. Do not use credentials or access that were not personally authorized.

What if the page contains a protected minor’s identity?

Restrict the original, do not republish the identity, and create a carefully redacted public copy only when publication is necessary.

What if the archive service fails?

Record the failure and use other lawful methods such as screenshots, PDF, screen recording, native media preservation, and an approved web archive capture tool.

Can artificial intelligence authenticate a social media post?

No. Artificial intelligence may help compare text or images, but authentication requires the original record, context, provenance, and corroboration.

What should happen when two captures show different versions?

Preserve both, document the capture times, compare the changes, and avoid assuming why the page changed.

What evidence would be needed for a social media capture to support a serious allegation?

The strongest record would include the original URL, complete contextual capture, account authentication, capture testimony, independent archives, preserved native files, hashes, chain of custody, and corroborating evidence.


Related EpsteinWiki Guides


Sources

Previous How the Epstein Files Numbering System Works
Next How To Audit Epstein Evidence Inventories Against Public Releases
Table of Contents