Web forensics questions

Questions about Eviquire

Eviquire is web-forensics software for acquiring and preserving evidence from public and authenticated browser-accessible sources. It connects the observed content with acquisition-session video, available network context, artifacts, hashes, timestamps, custody records and reports for later review.

What is Eviquire?

Eviquire is software for the documented acquisition, preservation and review of evidence from websites and browser-accessible applications. It is available in desktop and cloud deployments and is designed for web evidence rather than general disk, mobile-device or thick-client forensic acquisition.

What problems does Eviquire solve?

Eviquire helps investigators preserve online material before it changes, connect visible content with technical and procedural context, document how it was reached and maintain integrity and custody records for review. It also reduces reliance on isolated screenshots and disconnected manual notes.

What can Eviquire collect from a website?

Depending on the source, permissions, deployment and method, Eviquire can preserve pages or regions, source and web archives, screenshots, media, downloads, HTTP and network context, acquisition-session video, metadata, hashes, timestamps, activity records and reports. Not every source exposes every artifact, so collection scope and limitations must be verified.

Does Eviquire record the acquisition session on video?

Yes. Eviquire can record the acquisition session so reviewers can see navigation, clicks, displayed content, expansions and download actions. The video supports reconstruction of the examiner's work and does not replace the preserved webpage, files or technical artifacts.

Can Eviquire save network traffic during acquisition?

Eviquire can preserve application-layer web context and, in the Desktop workflow, coordinate packet-level network capture when Wireshark is installed and the environment permits it. The case record should distinguish a PCAP from browser or HTTP-level artifacts.

Can Eviquire acquire evidence from private portals or through a corporate VPN?

Yes, if the service is browser-accessible from the authorized workstation and the investigator has valid authority and credentials. Eviquire uses the workstation's permitted network path, so VPN, proxy, SSO, MFA and certificate requirements should be tested before formal acquisition.

What is the difference between Eviquire Desktop and Eviquire Cloud?

Eviquire Desktop runs in a controlled Windows environment and supports desktop-focused capabilities such as case management and locally configured packet capture. Eviquire Cloud provides browser-based access to supported acquisition workflows, while the hybrid option combines the available desktop and cloud services; current plan details are listed on the pricing page.

How can Eviquire evidence be reviewed by another person?

A completed case can be exported for controlled transfer and review, including through the Eviquire Portable Viewer where available. Another authorized Eviquire Desktop instance can also import the case so a separate examiner can verify and examine the preserved package without changing the originals.

Does Eviquire include case management?

Eviquire Desktop includes case-management functions for organizing cases, acquisitions, evidence, activity and reports. The cloud-only versions do not include the Desktop Case Manager; the hybrid plan includes access to the desktop component and therefore its case-management capability.

Does Eviquire guarantee that evidence is admissible in court?

No. Eviquire supports documentation, integrity, traceability and review, but only the relevant authority or court can decide admissibility and evidential weight. Investigators and counsel remain responsible for authority, procedure, testimony, interpretation and compliance with applicable law.

Continue exploring