Evidence Memorization

Alias provides a complete, defensible evidence capture workflow, from screenshots and screen recordings to chat exports, social media capture, file collection, and out-of-band transfer, all while maintaining OPSEC, attribution integrity, and chain of custody. Whether you are building investigative reports, criminal case packages, or corporate intelligence briefs, Alias ensures your evidence is captured correctly and preserved securely.

Native Support for Any Evidence Collection Workflow

Because Alias environments are real Virtual Desktops and real Virtual Phones — not browser simulators or proxy browsers — you are free to use any evidence capture tooling your workflows already rely on.

This includes:
  • Installed desktop software (screen capture, logging tools, chain-of-custody utilities)
  • Browser extensions / add-ons
  • Mobile apps on the virtual phone
  • Custom internal tooling or proprietary plugins
There are no restrictions and no proprietary format lock-in.
Your investigation workflows remain:
  • Familiar — tools and methods your team already knows
  • Portable — evidence remains standard, exportable, defensible
  • Scalable — workflows can be shared and repeated across analysts and cases

ForensicOSINT — Ready on Day One

For teams who don’t already have a standardized evidence capture solution in place — or for organizations that need a compliant, legally-defensible process out-of-the-box — Alias comes with ForensicOSINT pre-installed and licensed in every instance.

We’ve partnered with ForensicOSINT to provide:
  • Consistent, repeatable capture workflows
  • Court- and compliance-ready output formats
  • Automated metadata & chain-of-custody preservation
  • Web & mobile capture capabilities across devices
This means organizations can:
  • Start investigations immediately
  • Standardize evidence collection workflows
  • Train new analysts faster
  • Produce report-ready packages without manual formatting

Screen Recordings & Session Capture

Many evidence capture tools only work inside a browser, or only with certain plugins, which means important activity can be missed. Mobile app interactions, in-app chats, voice/video calls, menu navigation, and native UI screens often cannot be captured with browser-based tools alone. Some apps even explicitly block screenshots or blur capture attempts to prevent archiving.

That’s why Alias provides full-session screen recording for both Virtual Desktops and Virtual Phones. Instead of trying to bolt capture tools into every application, we record everything that happens in the investigation environment — every click, every interaction, every scroll. One solution that works everywhere, with no workflow changes and no gaps.

These recordings become the single source of truth — unified, consistent, and defensible.

Recording Library

Every recording is:

  • Stored in the Sockpuppet’s Secure File Vault, with the ability to utilize your own encryption key
  • Timestamped and operator-attributed with the ability to add notes and descriptions
  • Cryptographically hash-verifiable
  • Organized for easy review & export
  • Downloadable as timestamped MP4s for case files, reports, and testimony

AI-Driven Review & Case Management Integrations

Large case teams and high-volume investigations benefit when evidence can be automatically analyzed, rather than manually reviewed frame-by-frame.

Alias integrates with modern case-management platforms that use AI to watch Alias’s screen recordings and extract:
  • Text displayed on screen
  • Images and visual elements
  • Names, identifiers, timestamps
  • Voice and chat transcription
  • Behavioral sequences and patterns

These systems turn raw recordings into searchable, structured evidence.

One example is our integration with Tranquility AI, which automatically ingests screen recordings and produces:
  • Full text & OCR extraction
  • Audio transcription & speaker separation
  • Entity and relationship tagging
  • Timeline-based evidence navigation
Secure File Vault Integration (Out-of-Band Evidence Transfer)

Captured evidence must move from the Sockpuppet environment to your analyst workstation without linking the two.

The Secure File Vault included with Alias enables:

  • Out-of-band file transfers (no shared IP, no shared network)
  • Per-identity vaults to keep investigations isolated
  • Optional customer-owned encryption keys
  • Automated hashing & transfer logs for chain of custody
  • Optional malware scanning before download
Evidence That Holds Up Under Scrutiny

Alias ensures:

  • he persona used to collect evidence is consistent and defensible
  • The method of collection aligns with investigative and legal standards
  • The transfer process preserves integrity
  • The final artifacts are attributable, verifiable, and auditable

Because in investigations, how the evidence was collected matters as much as what it shows.

Get Started with SockPuppet Today

Let’s build your next identity together.

Contact SockPuppet today to discuss your operational needs and see how Alias can power your next investigation.