Free tools Windows power users keep installed
One-click scans. No signup required.
Save the livestream immediately, preferably in its native file format. Preserve the original URL and account details, record the visible time and your capture time zone, keep an untouched master copy, hash that master, and log every transfer. A screen recording is only a fallback when no native export is available; it should never be presented as the untouched original.
What to do in the first few minutes
Livestreams can vanish, be replaced, or become inaccessible without warning. Work in this order so that a disappearing stream does not leave you with only a cropped clip or a screenshot.
As an Amazon Associate I earn from qualifying purchases.
- Keep the stream open. Copy the complete platform URL, account or channel name, stream title, displayed date and time, and time zone. Note the viewer count if it is shown.
- Locate the relevant moment. Record the playback position, such as 00:37:18, and describe exactly what appears or is said in neutral language.
- Use the platform’s download or export function. If the uploader can provide the original file, request that file rather than a repost or messaging-app copy.
- Make a fallback recording only if necessary. If the stream is about to disappear and no native file can be obtained, record the playback and document that it is a screen-capture derivative.
- Protect the first complete file you obtain. Make an identifiable master copy, restrict write access, and do all viewing, clipping, blurring, or annotation on a separate working copy.
- Hash the master and start a contemporaneous log. Record the device, software, file name, size, hash, capture or receipt time, and every later handoff.
- Report promptly. Send the relevant information through the platform and to the appropriate authority, and ask whether a formal preservation request is required.
Context screenshots can support the record, but they do not replace the original URL and video file. A screenshot shows what was displayed at one instant; it does not preserve the stream’s data, audio, metadata, or complete sequence.
Choose the strongest capture available
The capture method affects what can later be authenticated, replayed, and explained. UK Government guidance says that extracting video in its native format helps maintain evidential integrity and picture quality. Filming a monitor or recording a browser window captures a presentation of the video, not the source data.
#1 Best Overall
- Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
- Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
- Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
- Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
- 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
| Method | Native file and metadata | Risk of recompression or alteration | Speed when a stream may disappear | Best use |
|---|---|---|---|---|
| Platform download or export | Usually strongest; retain the file exactly as supplied and preserve associated metadata | Lowest among ordinary viewer methods, although the platform may generate an export rather than provide the camera original | Fast if the button is available | Primary evidence copy |
| Original file from the uploader | Potentially strongest, especially when it includes the recording’s original metadata | Depends on how the uploader stored and transmitted it; document the source and transfer | May be slower than a platform download | Use when the platform export is unavailable or lower quality |
| Screen recording of playback | Does not preserve the source file’s original metadata; captures what your device rendered | High risk of new compression, dropped frames, altered audio, notifications, or player overlays | Immediate and useful when deletion is imminent | Fallback only; label it clearly as a derivative |
| Repost or messaging-app copy | Usually incomplete; metadata and provenance may be stripped | Often recompressed, cropped, captioned, or edited | May be easy to obtain but can disappear too | Lead or corroboration, not a substitute for the earliest available file |
Do not improve, stabilize, sharpen, denoise, or convert the first file before preserving it. Any conversion can create a different file and complicate an explanation of what was originally received.
Step 1: Preserve the stream’s context
Record identifying information before you navigate away or begin downloading. Put the details in a text note whose creation time is visible in your normal system records, then keep that note with the evidence package.
- Complete URL, including the platform’s path and any stream identifier.
- Account, channel, or page name exactly as displayed.
- Stream title, description, and displayed publication date.
- Displayed clock, your capture time, and the time zone for each.
- Playback position or start and end times for the relevant event.
- Viewer count, chat status, captions, and other visible context when relevant.
- A short factual description: who or what is visible, what is heard, and what changed. Avoid conclusions about intent or identity.
If the player shows a live clock, photograph or capture that display as a supplement. Also write down your device’s current time and time zone; a platform clock and a local clock can differ. Do not silently convert times. State whether a time is displayed by the platform, supplied by your device, or estimated from playback.
Step 2: Obtain the native file
Use a built-in export first
Choose the platform’s download, export, or creator-provided archive option. Save the resulting file without renaming its extension or opening it in an editor. Copy the URL and the download time into your log. If the platform supplies more than one rendition, keep the highest-quality original and record the alternatives rather than deleting them.
Request the uploader’s original
Ask the uploader to send the original recording through a method that preserves the file, such as a direct file transfer. Request the complete file, not only the segment that appears relevant. Record the uploader’s account, the request and response times, the transfer method, and any statement about whether the file was edited or exported.
When only a screen recording is possible
Capture the entire player, including its controls and clock when they are relevant, and avoid interacting with the page during the event. Keep the resulting file in its original format. In your notes, state that it is a screen recording, identify the device and software, and list limitations such as missing source metadata, player overlays, buffering, dropped frames, or notifications. Continue trying to obtain the native file; the fallback does not become an original merely because it is complete.
Rank #2
- 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
- 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
- Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
- 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
- What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.
Step 3: Make an isolated master and a working copy
The UK Defence Science and Technology Laboratory’s Digital Imaging and Multimedia Procedure v3.0 describes the key control as creating an identifiable, isolated, suitably stored master reference copy at the earliest opportunity. Apply that principle even if you are an individual reporter.
- Create a folder with a stable evidence identifier, capture date, and short subject label. Avoid names that assert guilt or authenticity.
- Copy the first complete file into a master location. Do not trim, rotate, subtitle, transcode, or open it in software that may write changes.
- Set the master storage to read-only where practical, or restrict it to an account that cannot edit or delete files. Record who has access.
- Make a working copy with a different filename and identifier. Perform viewing, clipping, redaction, transcription, or format conversion only on this copy.
- Keep the master and working copy in separate locations or clearly separate directories. Never overwrite the master with a derivative.
A master is not necessarily the camera’s untouched recording. If the platform generated an export, call it the “platform export master” in your notes. If it is a screen recording, call it a “screen-capture master.” The label should describe provenance without overstating what the file proves.
Step 4: Preserve metadata and replay requirements
Keep the original extension, file size, creation and modification times as received, audio tracks, subtitles, and any sidecar files. Save a text inventory listing the codec, resolution, frame rate, duration, audio channels, and software needed to play the file when those details are available. Do not assume that a media player’s displayed date is the recording date; distinguish embedded metadata from your own observation.
UK evidence procedure calls for video packages to include identification, metadata, replay requirements, and, where useful, audit trails or verification software. Include the player or decoder information needed by the receiving organization, but do not install unknown software on the master device merely to make a file play. If a file fails to open, preserve it unchanged and document the error, application, and version before trying a working copy.
Step 5: Hash the master and document transfers
A cryptographic hash is a fixed-length value calculated from a file’s bytes. Recalculating the same hash later can show that the bytes have not changed since the earlier calculation. A matching hash does not prove that the video is truthful, unedited before you received it, or recorded at the claimed time; it addresses file integrity after the hash was made.
Recommended Free Tools
Use SHA-256 when the receiving organization has not specified another algorithm. Calculate it on the master, save the value in a separate log, and keep a second copy of the log in a protected location. On common systems, the commands are:
Rank #3
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
| System | Command | Record |
|---|---|---|
| Windows PowerShell | Get-FileHash -Algorithm SHA256 -LiteralPath "C:Evidencemaster.mp4" |
Path, algorithm, hash, date/time, and account that ran the command |
| macOS or Linux | shasum -a 256 /path/to/master.mp4 |
Path, algorithm, hash, date/time, and user account |
Do not edit the master after hashing. If a file must be copied, hash the destination and compare it with the recorded value. If the values differ, stop, retain both files, and document the discrepancy instead of deleting the outlier.
NIST guidance recommends documenting the original source and each transfer and storing hash values separately. When no hash is made at the outset, NIST advises storing an early copy on physical media and documenting all transfers. That fallback is weaker than an early hash, so make the hash as soon as the first stable master exists.
Step 6: Keep a contemporaneous chain-of-custody log
Write notes as events happen, not from memory days later. The log can be a plain text or spreadsheet file, provided it is itself access-controlled and backed up. Use one row for every acquisition, copy, viewing session that creates a derivative, or handoff.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minute| Field | What to enter |
|---|---|
| Evidence ID | Stable identifier used in every filename and message |
| Date, time, and time zone | When the action occurred; note whether the time came from a platform display, device clock, or estimate |
| Action | Downloaded, received, copied, hashed, viewed, exported, transferred, or reported |
| Source and destination | URL, account, device, drive, folder, or recipient |
| Person or account | Who performed or received the action |
| File details | Filename, extension, size, duration, and hash when available |
| Device and software | Phone, computer, recorder, browser, operating system, and relevant application |
| Result and exceptions | Success, error, buffering, missing audio, altered metadata, or other limitation |
Use an append-only approach where possible. If you correct a note, preserve the original entry, add the correction with a new time, and explain why. Never backdate a reconstructed event.
Step 7: Store the evidence so it cannot be casually changed
Storage should protect against accidental edits, deletion, device failure, and unauthorized access. A practical arrangement is an isolated master, a separate working area, and at least one additional protected copy. The master and its backup should not be mounted with ordinary editing permissions.
| Storage approach | Controls to use | Trade-off |
|---|---|---|
| Write-protected or access-controlled removable media | Label the device, restrict write access, store it securely, and keep a separate hash log | Simple and portable, but can be lost or damaged; maintain another protected copy |
| Evidence-management system | Individual accounts, role-based access, audit trail, version history, retention controls, and hash records | Better for recurring or team workflows, but requires administration and an export plan |
| Controlled file server or encrypted archive | Encryption, limited permissions, immutable or versioned backup, and documented access | Convenient for organizations; configuration must prevent silent replacement |
Do not rely on a single laptop, a phone’s camera roll, or an untracked chat attachment. If you use removable media, label it with the evidence ID rather than a sensational description and keep it in a location with controlled physical access.
Rank #4
- Dual Converters, Infinite Potential：Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
- Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
- Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
- Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
- Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
Step 8: Create useful derivatives without losing the master
A short clip can help a newsroom or platform reviewer understand the issue quickly, but it is a derivative. Make it from the working copy, preserve the full master, and record exactly what was changed.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →- Record start and end timecodes relative to the master.
- State whether you removed pauses, chat, advertisements, or unrelated sections.
- Record any cropping, resizing, blurring, subtitle creation, audio adjustment, or format conversion.
- Use a new filename and calculate a new hash for the derivative.
- Keep the editing project or command line when it may help reproduce the result.
- Do not use a derivative to conceal uncertainty in the original; disclose gaps, muted sections, and dropped frames.
When privacy or safety requires redaction, preserve the unredacted master securely and explain who authorized the redaction, what region or words were obscured, and why. A recipient may need the unredacted file under controlled conditions to assess authenticity.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Step 9: Report promptly and request preservation
Send the platform report with the original URL, account, stream title, relevant timecode, concise factual description, and your evidence identifier. Upload the smallest useful derivative only when the reporting channel limits file size, and say that an untouched master is available. Keep confirmation numbers, emails, and submission times in the log.
For police, regulators, lawyers, or a newsroom, provide the master through the recipient’s approved secure-transfer process. Do not email an unencrypted master merely because it is convenient. Ask whether the recipient wants the full file, a hash, metadata inventory, or a formal preservation request, and follow its instructions without changing your retained copy.
Platform retention is not guaranteed. X states that it may preserve a temporary snapshot for 90 days after a legally appropriate law-enforcement request; preservation does not itself disclose the records. This illustrates why a requester should report quickly and ask the receiving authority or counsel whether it must send a formal preservation request. A platform’s internal preservation does not replace your own master and log.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsCommon failure modes and recovery
The stream disappeared before you downloaded it
Retain the URL, screenshots, exact account name, displayed times, and any lawful screen recording or repost. Note the moment you discovered the disappearance. Ask the platform and the relevant authority about preservation, and contact the uploader for the original. Do not claim that a screenshot proves the entire event.
Best Value
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
You only have a screen recording
Keep the complete recording, its original file, and your device and software details. Label it as a screen capture, list visible overlays and technical limitations, and continue seeking the native export. Supply the recording as a lead or fallback evidence, not as an untouched original.
The file was edited or converted before you received it
Preserve it exactly as received, record who supplied it and what they said about editing, and request the earlier file. Hash the received file and identify it as a supplied or converted copy. Never convert it again and call the result original.
The hash changed after copying
Stop further handling, retain both versions, record the source and destination devices and times, and recalculate hashes from the untouched source. A changed value can result from an incomplete transfer or an actual alteration; the log should show the discrepancy rather than hide it.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
The video will not play
Keep the unplayable file. Record the application, version, error message, and operating system. Try a viewer or codec on a working copy, not the master, and preserve any newly generated file as a derivative with its own hash and processing notes.
Time displays conflict
Keep every original display, write down each clock’s time zone and source, and avoid choosing one silently. State whether the difference may reflect playback delay, device clock drift, daylight-saving settings, or an unknown offset. Let the receiving authority reconcile the timelines.
Privacy, safety, and lawful handling
Preserve only what is relevant and lawful to collect. Livestreams can contain faces, addresses, medical information, minors, or private conversations. Do not publish identifying details merely because you captured them. Restrict access, encrypt transfers when appropriate, and follow the receiving organization’s retention and disclosure rules.
Do not hack an account, bypass access controls, impersonate an uploader, or obtain a stream through a method you are not authorized to use. A clean chain of custody cannot cure unlawful acquisition. If the material suggests an immediate threat, contact emergency services or the relevant authority while preserving the file; do not delay a safety report to perfect your paperwork.
A compact handoff package
For a professional recipient, assemble these items in one controlled package:
- The untouched master file and its SHA-256 value.
- A separate working clip, if needed, with its own hash and edit description.
- A text inventory of URL, account, title, displayed times, time zone, timecode, file details, and replay requirements.
- The contemporaneous chain-of-custody log, including every transfer and exception.
- Context screenshots identified as supplements, not replacements.
- Any uploader correspondence, platform report confirmation, or preservation-request reference.
- Instructions for secure access and the name of the person responsible for the master.
This package lets a recipient inspect the complete file, understand how it was obtained, reproduce the hash, and distinguish the original capture from any convenient excerpt.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
