OSINT Documentation and Evidence Capture Tools
Document, timestamp and secure your digital evidence to make it admissible in court or professional reports. These tools cover screenshot capture, annotation, file hashing and chain of custody.
19 tools · Version française
- Auto-Archiver (T)also written Auto-Archiver, Auto ArchiverPython tool by Bellingcat to automatically archive web content (social media posts, videos, images) in a secure and verifiable way. Supports Google Sheets, CSV, and CLI; stores to S3 or Google Drive.free
- BrowserlingOpens a site in a disposable remote browser. Lets you view a suspicious page without exposing your own machine or address.freemium
- Exterro FTKalso written ExterroFTKCommercial forensic suite used in judicial work, with a free imager for creating court-admissible disk copies without altering the original.paid
- EZR OSINT Sidebar (T)also written EZR OSINT SidebarChrome extension providing integrated OSINT tools in a browser sidebar; extracts and documents images, emails, IPs, and metadata from web content.free
- Fiddler (T)also written FiddlerWeb debugging proxy that monitors, inspects, and logs HTTPS/WebSocket traffic between a computer and the internet for analysis.freemium
- Forensic OSINT (T)also written Forensic OSINT, ForensicOSINTChrome extension for full-page web capture with evidence preservation; timestamps and disclosure-ready exports for legal investigations.free
- FRAPS (T)also written FRAPSVideo recording and screen capture utility for Windows with FPS benchmarking and lossless video capture; last updated 2013 but still functional.freemium
- Full Page Screen Capture Chrome Extension (T)also written Full Page Screen Capture Chrome ExtensionChrome extension for one-click full-page screenshot capture of entire scrollable page content.free
- Greenshot (T)also written GreenshotFree and open-source screenshot program for Windows and macOS with annotation, highlighting, and multi-format export capabilities.free
- HunchlyBrowser extension silently capturing every visited page into a timestamped, hash-verified case file.paid
- ICIJ Datasharealso written ICIJDatashareDocument analysis platform built by the ICIJ for the Panama Papers. Runs locally, indexes large leaked or obtained document sets, performs OCR and extracts named entities so an investigator can search across thousands of files.free
- Page2Images (T)also written Page2Images, Page2 ImagesWebsite screenshot and full-page capture API that converts URLs to images for various devices including desktop, mobile, and tablet.freemium
- Perma.ccalso written PermaHarvard-run permanent archiving service producing citable links that survive link rot.freemium
- ShareX (T)also written ShareX, Share XFree and open-source screenshot and screen recording tool for Windows supporting 80+ upload destinations and extensive automation workflows.free
- Snapper (T)also written SnapperOpen-source Linux-based tool for automated batch website screenshotting and file capture across multiple hosts.free
- The Sleuth KitOpen-source forensic toolkit for disk images and file systems. Recovers deleted files and rebuilds a timeline of activity, with Autopsy as its interface.free
- Timeline JS3also written TimelineJS3Open-source JavaScript timeline tool by Knight Lab that creates interactive multimedia timelines from Google Sheets or JSON data.free
- Web Page SaverBrowser extension for saving complete webpages as single HTML files for offline access and evidence preservation.free
- ZeeMapsalso written Zee MapsInteractive map creation and sharing tool with unlimited markers, 3-level access control, and support for crowdsourced data input.paid
Frequently asked
- How to timestamp digital evidence?
- Use Archive.today or the Wayback Machine for a timestamped archive. For files, calculate the SHA-256 hash (via CyberChef) before and after to prove integrity.
- What is digital chain of custody?
- It's the documented traceability of collection, transfer and storage of digital evidence, ensuring it hasn't been altered since its original collection.