WDH-086 Websites, Domains & Internet Infrastructure
Can I prove somebody uploaded content to a website?¶
Provider records may prove that a particular account uploaded content. Identifying the person responsible requires corroboration from access, device, file, communications and wider operational evidence.
Evidence to consider¶
- account and upload timestamp;
- source IP address;
- file name, size, metadata or hash;
- administrator or user role;
- original and working files;
- messages or approval records;
- device use and saved credentials.
Keep the conclusion precise¶
Accounts, IP addresses, devices and provider records may identify a technical or contractual relationship without identifying the individual responsible. Test shared access, delegated administration, automation, compromise and changes over time.
Key takeaway
Separate upload, authorship, approval, direction and benefit; they may involve different people.