Evidence Memorialization

Alias provides a complete, defensible evidence capture workflow, from screenshots and screen recordings to chat exports, online source capture, file collection, and out-of-band transfer, all while maintaining OPSEC, attribution integrity, and chain of custody. Whether you are building investigative reports, criminal case packages, or corporate intelligence briefs, Alias ensures your evidence is captured correctly and preserved securely.

Screen Recordings & Session Capture

Many evidence memorialization tools only work inside a browser, or only with certain plugins, which means important activity can be missed. Native desktop applications, mobile apps, chats, voice/video calls, menu navigation, and native UI screens often cannot be captured. Some apps even explicitly block screenshots or blur capture attempts to prevent archiving.

That’s why SockPuppet provides evidence capture capabilities which memorializes the entire user session to video, regardless if you’re using the desktop or phone. Instead of trying to bolt capture tools into every application, we record everything that happens in the research environment – every click, every interaction, every scroll. One solution that works everywhere, with no workflow changes and no gaps.

These recordings become the single source of truth — unified, consistent, and defensible.

Evidence Locker

Every recording is:

  • Stored in the investigative environment’s Secure File Vault, with the ability to utilize your own encryption key

  • Timestamped and operator-attributed with the ability to add notes and descriptions
  • Stored on immutable storage for the retention period
  • Organized for easy review & export

  • Capture bundles include raw video files, encoded MP4, chain of custody, hash, and other data critical to ensure court admission

AI-Driven Review & Case Management Integrations

Alongside Alias’s native evidence capture, every instance includes a ForensicOSINT license for legally-tailored reports, hashed screenshots, and full-page web archives — additional capture coverage for cases that need it.

Alias integrates with modern case-management platforms that use AI to watch Alias’s screen recordings and extract:
  • Text displayed on screen
  • Images and visual elements
  • Names, identifiers, timestamps
  • Voice and chat transcription
  • Behavioral sequences and patterns

These systems turn raw recordings into searchable, structured evidence.

One example is our integration with Tranquility AI, which automatically ingests screen recordings and produces:
  • Full text & OCR extraction
  • Audio transcription & speaker separation
  • Entity and relationship tagging
  • Timeline-based evidence navigation
Secure File Vault Integration (Out-of-Band Evidence Transfer)

Captured evidence must move from the investigative environment to your analyst workstation without linking the two.

The Secure File Vault included with Alias enables:

  • Out-of-band file transfers (no shared IP, no shared network)
  • Per-investigation vaults to keep investigations isolated
  • Optional customer-owned encryption keys
  • Automated hashing & transfer logs for chain of custody
  • Optional malware scanning before download
Evidence That Holds Up Under Scrutiny

Alias ensures:

  • The investigation used to collect evidence is consistent and defensible

  • The method of collection aligns with investigative and legal standards
  • The transfer process preserves integrity
  • The final artifacts are attributable, verifiable, and auditable

Because in investigations, how the evidence was collected matters as much as what it shows.

Get Started with SockPuppet Today

Let’s power your next investigation together.

Contact SockPuppet today to discuss your operational needs and see how Alias can support your mission.