Skip to main content
Methodology — Evidence Preservation
1. Original vs. working copy
Keep read-only original in encrypted storage; work on copies for annotation.
2. Hashing
SHA-256 on acquired files where feasible; record tool version for transcoding.
3. Web captures
Prefer institutional archives (Wayback) plus independent second capture when stakes are high.
4. Chain of custody (lightweight)
Who acquired, when, from where, what changed (if anything). Suitable for journalism; consult counsel for litigation.
5. Redaction before share
Strip metadata and third-party PII before public release.
Related skills
media-verification-specialist, secure-source-communication
