Good evidence makes reports credible and helps authorities take action.
Evidence is the difference between a credible report and a complaint that cannot be acted on. The key is to capture content before it is deleted and to record details that prove when and where it existed.
Capture the full page, including the URL, date, and time. On many systems you can enable a timestamp in the status bar or draw a box around it.
Use public web archiving services to create an independent, time-stamped copy of a web page. These links are often accepted by platforms and investigators.
Record usernames, display names, profile URLs, account IDs, and any linked websites or contact information. These help identify repeat offenders.
Save emails, direct messages, and comments with headers or metadata intact. Do not edit the content before saving.
I can explain how to document a cyber incident, organize evidence for a report, and reduce the risk of losing important data. I do not perform unauthorized investigation or surveillance, but I can guide victims and advocates through the preservation process.
