Forensic Web Acquisition Explained

What is forensic web acquisition?

Forensic web acquisition is the controlled process of capturing web-based content — including dynamic pages, social media platforms, and web applications — while preserving technical context such as network activity, loaded resources, and user interactions.

How does forensic web capture differ from web archiving?

Unlike traditional web archiving, forensic web capture focuses on evidentiary integrity rather than long-term content preservation. It records how content is rendered live, validates captured data through hashing, and documents the acquisition process for legal defensibility.

What standards govern online evidence acquisition?

Online evidence acquisition is commonly guided by international and national forensic frameworks, including ISO/IEC 27037 for digital evidence handling and SWGDE best practices for acquiring online content in investigative contexts.

Here some of the core Eviquire's Features

Cross Platform

Eviquire can natively run in Windows and Linux. The best flexibility ever!

Cloud SaaS

Eviquire is also served as Cloud SaaS, no Installation! Compatible with any HTML5 Browser!

Virtual Machines

Eviquire can run inside a Virtual Machine to comply with the best Digital Forensic best practices.

Unlimited Acquisitions

No matter the plan selected, You can create Unlimited Cases, Acquisitions and Evidence.

Floating Subscription

You can use your personal Eviquire license in as many computers as you want just once at the time.

Community License

We do believe the community really needs a free Web Forensic Tool! Here it is!

Case Manager

The place where you can organize all your Cases, Acquisitions and Evidence.

Forensic Reports

Every time a Case, Acquisition or Evidence is closed, a Forensic Report is created!

Case Viewer

Feel free to import and review cases created by others or created by you in other machines.

Judicial Evidence

Eviquire creates Forensic packages and reports compliant with ISO / IEC 27037: 2012 Standard.

Chain of Custody

During the entire Acquisition Eviquire diligently maintain the Digital Chain of Custody for you.

Files Triple Hash

All the Evidence are hashed with 3 different algorithms to avoid any even remote possibility of collision.

Realtime Evidence Timestamp

Each evidence is timestamped in realtime, not at the end of the acquisition session. We can't do better than this.

Multi Blockchain Timestamp

Striving for perfection, Eviquire timestamps each Forensic Package created in multiple Blockchains.

Next Gen Blockchain

The use of latest technologies and blockchains makes Evidence's timestamp fast and scalable.

Screen Recording

The entire Acquisition session is screen recorded to create a strong and presentable Evidence.

Network Traffic Capture

The traffic during the Acquisition Session is fully captured to make the final Evidence even stronger.

Activity Audit

Eviquire keeps track of user interactions during the acquisition session, creating an auditable user activity log.

A4 Printable Screenshot

To facilitate the presentation fo the Evidence, Each Screenshot Evidence is printable in A4.

Pageshot

If a Screenshot Evidence is not enough, the Pageshot will capture the content of a long page!

Smart Page Auto-scroll

For social media or infinite pages, Eviquire can automatically scroll while acquiring the content.

Source Code MHTML

Each Web Evidence's source code is exported and saved in Web Page Archive format (MHTML)

Split Screen

Leverage the Split Screen feature to capture different websites side by side or the same website that react differently based on User Agent String

VR Ready!

Just kidding!..
you won't find this feature in Eviquire... yet! :)