ChainShot - forensic web captures

Timestamped, hash-chained screenshots of web pages (URL, title, UTC time, SHA-256) for forensic and investigation reports.

ChainShot turns screenshots of web pages into evidence that anyone can check later. • One click (or Alt+Shift+S) captures the visible part of the tab, or the whole page (scrolled and stitched). • Optional page archive (MHTML) saved and hashed next to the screenshot. • A banner is added BELOW the page, never over it: entry number, case, tag, UTC time, examiner, URL and title. • Each capture is hashed with SHA-256 and chained to the previous entry in an append-only journal: editing, removing or reordering anything breaks the chain. • Cases are plain folders in your Downloads folder, or, with the free ChainShot app for Windows, the case you are already working on, next to your screen captures, files and notes. • Verification needs nothing but Python: chainshot.py verify <case>. Seals and RFC 3161 timestamps are available in the app and in chainshot.py. No account. No telemetry. No server: nothing leaves your computer. Open source (MIT): https://github.com/Dalkin69/chainshot Made for digital forensics coursework, investigations, OSINT, compliance and anyone who must prove what a web page showed at a given time.