TGWITNESS / DOCUMENTATION

Follow the message. Understand the evidence.

Get your first capture, explore how the proof works, then build the setup you need.

Modes, scenarios and evidence levels

Collection scopes, event boundaries, eight verification mechanisms and six fictional investigation scenarios.

Your first captured message

Start in minutes

Try TgWitness with sample data, then launch your own Telegram observation workspace on Windows, Linux or macOS.

Dedicated account

Prepare a separate Telegram account for collection.

Connect an account

Connect Telegram by QR code, phone number or session import. Choose sources and check that new messages reach your journal.

Choose a proxy

Maintain automatic MTProxy routes or use your own proxy. Choose IP modes, fallback rules and the route for external requests.

Export and verify

Export captured Telegram history, verify signatures and compare a journal with a checkpoint retained by an independent witness.

GitHub Actions capture

Export one Telegram chat on a temporary GitHub runner.

Learn by trying it

See how evidence works

Follow a message from capture to checkpoint. Change a sample record, recalculate its SHA-256 chain and see what a retained checkpoint detects.

Investigate across all chats

Run an end-to-end Telegram investigation across channels, groups, private chats and bots: whole-account capture, history, people, links, files, timelines and verified evidence.

Keep it secure

See where sessions, keys and evidence live, what leaves your machine, what the protections cover and how to harden an installation.

The complete reference

Every document of the project, rendered here with its diagrams. The guides are the short path; these pages hold every detail.