BLOG

See the latest news and insights around Information Governance, eDiscovery, Enterprise Collaboration, and Social Media. 

All Posts

Facebook Forensics

Recent reports show over one billion people were on Facebook on one day. One billion people! Most were there to catch up with friends, see some trending content, or just to waste some time. With a crowd that large, you know there are a fair bit of nefarious activities going on.

facebook-photos

Whether it's trashing someone's reputation, perpetuating some fraud or posting photographic evidence of misdeeds, if it happens in real life, it happens on Facebook. If it's not about you, you can probably laugh it off.

But what about if it IS about you? A coworker posts nasty, even threatening messages? Someone is posting your content as their own, or worse, posing as your business? What if they are trying to collect money from your parents on some tear-jerking scheme that sounds legit?

Maybe it's not about you personally, but it's your job to protect the innocent. Perhaps you're a lawyer who has a client going through a contentious divorce being played out online. Or, a fraud investigator who sees evidence on Facebook. Or, a law enforcement official who needs to capture evidence of illegal activities that are occurring (or being corroborated).

 

Capture offending posts as evidence

In each of these examples what is needed is a Facebook forensics tool, some way to quickly capture the offending posts in a way that is authenticated as evidence.

As the number of cases with a social media component increase Courts, and judges become more familiar with social media. They are not some esoteric, isolated niche cases but rather becoming mainstream. Therefore, Facebook forensics and other social media Discovery methods are becoming necessary.

It's not as simple as taking a Screenshot. After all, a screenshot can be photoshopped. You need to have the digital evidence in a format which the Courts will approve. In the US, this means compliance with the FRE (Federal Rules of Evidence) and the E-Sign Act. Authenticated digital evidence involves capturing not only the screen but also the corresponding Metadata as well as verification of both (such as with a timestamp and Digital signature).

You also have to act quickly. In many cases, the offending post will be deleted. If you don't get a proper capture that evidence might disappear forever.

 

Capture what you (legally) can

Facebook forensics is about capturing all the various channels that Facebook provides (that you have access to). If a channel is public, that's straight forward; the person has, in effect, given permission. If you are there "friend", then the same rule applies; as you have been granted access you can capture and preserve those online activities.

If you, or one of your colleagues, own the channel (for example, a business page) you can also capture the evidence.

Gathering Facebook evidence doesn't mean you can go on a fishing expedition and start Trolling for information with fake accounts, fake friends, and other devious actions. If you stick to what you control, or public information, and you properly document the digital evidence, then your Facebook forensic investigation will hold up to the scrutiny of an open court.

 

How WebPreserver can be of use to your firm

WebPreserver is the world's only fully-automated social media and web forensic preservation tool that is unaffected by API restrictions. All content is authenticated for use as evidence in litigation and meets FRE 902.13,14 requirements for admissibility - simple screenshots or PDF exports are not self-authenticating.

This technology takes the onerous, costly responsibility out of preserving social media content as part of eDiscovery proceedings which often requires days of manual workflow. This mitigates the likelihood that evidence will be deleted prior to collection. A lot of content can be removed or edited while waiting for either your team to collect it using manual tools, or in waiting for a third party vendor to collect it on your behalf.

Related Posts

9 Rules for Government Social Media & Website Archiving Compliance

The need for clear communication at all levels of government has never been greater. Governmental bodies must ensure transparency, trust and professionalism with their colleagues and, more importantly, with the public. Getting this right isn’t just a case of better public relations—it is a matter of compliance.

6 Steps to Implementing a Legal Hold

Companies must ensure they are in total compliance with data preservation requirements—and with the growing amounts of ESI generated, it is increasingly common for litigation to require access to evidence stored digitally. So what can legal teams do to ensure that crucial data is placed on legal hold and not disposed of?

What Is WORM Storage? And Why Is It Important?

When it comes to compliance, those working within heavily regulated industries are well accustomed to the constant introduction and updating of new legal rulings. Thankfully, technology keeps evolving in support of businesses to help make meeting these requirements an achievable and even streamlined process.