Eviquire use cases
Preserve online evidence for the work investigators actually do.
Each guide explains the collection objective, recommended workflow, useful evidence outputs, limitations, and questions reviewers commonly ask.
What can Eviquire be used for?
Eviquire supports documented acquisition of volatile online material from websites, social platforms, video, authenticated pages, and dark-web sources. Depending on the selected workflow and configuration, an evidence package can contain visible content, source information, screenshots, session recording, network context, metadata, cryptographic hashes, timestamps, activity logs, chain-of-custody records, and forensic reports.
The software supports the collection process; it does not determine identity, truth, infringement, misconduct, or legal admissibility. Those conclusions require appropriate authority, corroborating evidence, validated procedures, and qualified human judgment.
Investigation types
When online material may need to be preserved
These are examples of matters in which teams may need to document volatile web content. Eviquire records what was available during collection; it does not determine whether an allegation is true, who is responsible, or what legal action should follow.
Find workflows for your role
Which use cases are most relevant to you?
Choose your profession for a complete role-specific guide, or open one of the recommended acquisition workflows directly.
Explore all profession-specific solutions →
Explore by investigative task
Eleven detailed acquisition workflows
Website evidence for litigation
Website evidence preservation is the documented acquisition of relevant online content and its technical context before the material changes or disappears. For litigation, the objective is to create a reviewable record that can be authenticated and explained—not merely a screenshot of what was visible.
Read the use case →02Social media evidence
Social media evidence acquisition preserves relevant posts, profiles, comments, media, and surrounding context in a documented session. A strong workflow records what was visible, where it appeared, how the investigator reached it, and how the resulting files can be checked later.
Read the use case →03IP infringement evidence
Online intellectual-property evidence collection documents allegedly infringing listings, media, branding, claims, seller information, and transaction context before a platform or publisher changes the material. The capture should preserve both the disputed content and enough context to explain where and how it appeared.
Read the use case →04OSINT evidence collection
OSINT evidence collection converts online research findings into preserved, attributable, and reviewable records. It connects an analyst’s observation to the source URL, collection time, navigation path, technical context, integrity information, and case rationale.
Read the use case →05Video and streaming evidence
Online video evidence acquisition documents the media together with the webpage, account, title, description, visible date, URL, playback context, and collection history. The objective is to preserve what was available and observed without confusing a screen recording with the original media file.
Read the use case →06Internal investigations
Online evidence in an internal investigation should be collected under a defined mandate, with attention to relevance, employee privacy, privilege, retention, and access. A documented acquisition can preserve external pages or authorized web-accessible material while recording who collected it, when, and how.
Read the use case →07Authenticated web content
Authenticated web evidence acquisition documents content that is visible only after authorized login or through a restricted workflow. Because access state affects what the page displays, the report should explain the account context, navigation, permissions, and collection boundaries without exposing credentials.
Read the use case →08Dark-web evidence
Dark-web evidence acquisition preserves relevant content from services that require specialized access while documenting source identifiers, access conditions, collection time, navigation, integrity information, and investigator actions. Operational security and legal authority are central to the workflow.
Read the use case →09Online defamation evidence
Online defamation evidence collection preserves the alleged statement together with the publication context needed to review it later: the page or post, author or account as presented, URL, audience-facing context, date and time, linked material, and collection record. It documents what was available during acquisition; it does not decide whether a statement is defamatory or who is legally responsible.
Read the use case →10Harassment and threat evidence
Online harassment and threat evidence collection documents reported posts, messages, profiles, media, and interaction context before it changes or disappears. The aim is a clear record of what was displayed and how it was acquired, while protecting sensitive information and avoiding unsupported conclusions about identity, intent, or risk.
Read the use case →11Fraud and impersonation evidence
Online fraud and impersonation evidence collection documents websites, adverts, social accounts, listings, communications, and payment-facing material that may be relevant to a suspected scam or false identity. It preserves the presentation and collection record for review; it does not prove fraud, identify an operator, or replace financial, legal, or law-enforcement investigation.
Read the use case →Applies to every use case
Evidence quality depends on method and judgment.
Appropriate authority
Confirm the legal or organizational basis, access permissions, scope, and collection boundaries before acquisition.
Relevant context
Preserve enough surrounding information to explain the source and meaning without collecting unrelated sensitive data.
Documented limitations
Record missing, inaccessible, dynamic, interrupted, or uncertain material rather than implying completeness.
Reviewable integrity
Use hashes, trustworthy time information, activity logs, custody records, and controlled handling so later changes can be detected.
Professional guidance
Organizations should validate their procedures and follow applicable law and policy. Useful primary references include SWGDE Best Practices for Acquiring Online Content, ISO/IEC 27037:2012, and NIST digital-evidence resources.
Frequently asked questions
What are Eviquire use cases?
Eviquire use cases describe practical workflows for preserving websites, social media, video, authenticated pages, dark-web sources, and other volatile online material with context, integrity records, activity history, chain of custody, and reporting.
How are use cases different from industry solutions?
A use case starts with the task an investigator needs to complete, such as preserving a social post or documenting an online listing. A solution page starts with the professional audience, such as law enforcement, legal teams, or OSINT analysts.
Does Eviquire make online evidence automatically admissible?
No. Eviquire supports documented acquisition and verification. Courts and other decision-makers assess evidence under the facts, methods, and rules that apply in their jurisdiction.