An image capture of information displayed on a device. Screenshots can be useful leads but may lack context (metadata, source, message IDs). Investigators often attempt to obtain native exports, device artifacts, or provider records to authenticate and corroborate the content.
