A vendor's Snapchat brag reaches 311 only as a forwarded screenshot; the original snap is gone. What can the analyst honestly do with that artifact?
Select an answer to reveal the explanation.
Short Explanation
A forwarded screenshot is a photocopy of a photocopy. You can still read what is in the frame—text, chrome, timestamps that show—but you cannot claim you opened the original snap. Label it second-hand and work the pixels you have.
Full Explanation
When the only artifact is a forwarded screenshot, OSINT is limited to what is visible: pixels, captions, and user-interface chrome. The report must state that the analyst did not retrieve the original snap. Screenshots remain useful evidence of what was forwarded to 311; they are not worthless. Restoring snaps from platform servers with an exploit is out of scope and not a PORP method.