# Evidence Collection During a Test

> Master the art of capturing bulletproof pentest evidence. Learn to hash artifacts, structure proof folders, and document exploits for reproducible reporting.

Canonical: https://codelivly.com/rooms/evidence-collection-during-a-test
Last updated: 2026-08-30

| | |
|---|---|
| Level | Beginner |
| Category | Cybersecurity |
| Lessons | 5 |
| Estimated time | 30 min |
| XP | 200 |

A penetration test without evidence is just a rumor. This module teaches the operational discipline required to capture, verify, and organize proof of exploitation during active testing. You will learn how to take effective screenshots, capture HTTP requests and responses, hash artifacts for integrity verification, and structure your evidence directories so that report writing becomes a simple assembly task. By mastering evidence collection, you ensure your findings are reproducible, defensible in compliance audits, and impossible for a client to dismiss as theoretical.

## Lessons

1. Why Evidence Collection Matters for Credibility (30 min)
2. Screenshotting & Documenting Findings Properly (30 min)
3. Command Logging & Terminal History Management (30 min)
4. Organizing Findings by Severity as You Go (30 min)
5. Tools for Evidence Management (30 min)

## Related

- [Learning path: Pentest Methodology & Reporting](https://codelivly.com/learning-paths/pentest-methodology-reporting)
- [All rooms](https://codelivly.com/rooms)