Reconstructing cached video stream content: - Part 2

Graeme Horsman

Research output: Contribution to journalArticlepeer-review

124 Downloads (Pure)


In 2018, Horsman (2018a; 2018b) provided guidance for the reconstruction of cached stream remnants following use of the Periscope, Facebook Live and YouTube platforms. These works confirmed that video stream content can be cached to a local device when viewed via an Internet browser, and that following the provided methodology, video content can be rebuilt for subsequent viewing. This work provides an analysis of a further six platforms; Twitch, Youtube Live, Mixer,,, and Younow. An analysis of localised stream caching is provided along with reconstruction methodologies to support those investigating offences where streaming may provide pertinent evidence of a criminal act or in fact be illegal per se.
Original languageEnglish
Article number200893
Number of pages5
JournalForensic Science International: Digital Investigation
Early online date4 Dec 2019
Publication statusPublished - 31 Dec 2019


Dive into the research topics of 'Reconstructing cached video stream content: - Part 2'. Together they form a unique fingerprint.

Cite this