WDH-085 Websites, Domains & Internet Infrastructure
Does a server log prove a person viewed the content?¶
A server log proves that the server received a request and may record what it returned. It does not, on its own, prove who made the request or whether any person viewed, read or understood the content.
Evidence to consider¶
- IP address, timestamp and requested path;
- user-agent, response code and transferred data;
- referrer information;
- browser or application context;
- browser history and cached content;
- downloads, screenshots and interaction;
- evidence linking the device to a person.
Keep the conclusion precise¶
Accounts, IP addresses, devices and provider records may identify a technical or contractual relationship without identifying the individual responsible. Test shared access, delegated administration, automation, compromise and changes over time.
Key takeaway
Report the request precisely. Do not convert a server event into an unsupported claim that a suspect viewed the page.