Evidence and Exports
How WSHawk v4 keeps notes, traffic, browser evidence, and export metadata tied to the same project.
Evidence and Exports
Evidence is one of the most important parts of the v4 release.
What Stays in the Project
A project can hold:
- traffic records
- identities
- notes
- findings
- attack runs
- browser artifacts
- timeline events
- export bundles
Browser Evidence
WSHawk can collect Playwright-assisted browser evidence for payload execution signals. The correct framing is evidence collection that supports review, not a blanket promise of perfect automated truth.
Export Bundles
Current export bundles are designed to carry more than a screenshot or a text note. The important pieces are:
- provenance
- related traffic context
- notes and findings
- integrity metadata
Best Practice
Export after the replay, AuthZ diff, or race result has been reviewed and tied back to the relevant traffic and identity context.