[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 593
  • Last Modified:

screenshot as evidence

How can we detect if a screen shot has been edited?
Must it be of certain format (jpg, png, PDF, ...) ?
0
sunhux
Asked:
sunhux
  • 4
  • 4
5 Solutions
 
Dave BaldwinFixer of ProblemsCommented:
PCs normally create JPgs, Macs create PNGs, I don't know what Linux GUI will create.  You would have to look for something that doesn't match what a known screenshot will show.  It could be very difficult to tell whether it has been edited.  One possible clue could be that the screenshot is not the same size as the screen it is supposed to be showing.  That would indicate that it has been cropped or resized.
0
 
David Johnson, CD, MVPOwnerCommented:
With a skilled editor you won't see any difference even at high magnification (zoom in).  Date Time stamps can be altered. You need to have the complete chain of evidence .  From the time the screenshot is taken until it is presented as evidence. A forensic search of the hard drive that it was originally saved on can reveal older versions.  Computer graphics do not stand up well in court these days.
0
 
sunhuxAuthor Commented:
Right, the screen shots are needed as evidence to auditors that
certain accounts have been deleted as of a certain date/time:
my plan was to have the date+time displayed at the bottom
right corner with Windows "Users" management listed, then
take a screen shot but I was asked how do I know the screen
shots have not been altered/rigged?
0
Will You Be GDPR Compliant by 5/28/2018?

GDPR? That's a regulation for the European Union. But, if you collect data from customers or employees within the EU, then you need to know about GDPR and make sure your organization is compliant by May 2018. Check out our preparation checklist to make sure you're on track today!

 
David Johnson, CD, MVPOwnerCommented:
Take the screen shots yourself then sign a declaration is about all you can do.
0
 
sunhuxAuthor Commented:
Thought a video shot of, say, a crime taking place (say theft in a shop)
could stand in a court, or couldn't it?

Actually those screen shots are not taken by me, rather by my
Wintel colleague from a different group.
0
 
sunhuxAuthor Commented:
Perhaps could ask my colleague to use his iPhone to take
a very short video of his screen?
0
 
sunhuxAuthor Commented:
I was tasked to front the auditors
0
 
David Johnson, CD, MVPOwnerCommented:
Actually those screen shots are not taken by me, rather by my
Wintel colleague from a different group.


Print the screenshot and have him sign it
0
 
David Johnson, CD, MVPOwnerCommented:
A CCTV used as evidence the video is removed from the scene and a strict chain of custody is enforced.  A video of unknown parentage is unacceptable  i.e. using a green screen I can put anyone anywhere.
0

Featured Post

The 14th Annual Expert Award Winners

The results are in! Meet the top members of our 2017 Expert Awards. Congratulations to all who qualified!

  • 4
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now