{
  "format": "e-Dex-certificate",
  "version": "1.0",
  "template": {
    "id": "cloud-evidence",
    "name": "Cloud Evidence Collection Certificate",
    "category": "Digital Forensics",
    "jurisdiction": "Global"
  },
  "integrity": {
    "algorithm": "SHA-256",
    "hash": "0258c3bbc7d982383fd1668facd4dcd03fc64a69dc6a651c41f9151ffd2df846",
    "sealedLineCount": 22,
    "verification": "Recompute SHA-256 over each sealedContent line followed by a newline (UTF-8); the result must equal the stated hash."
  },
  "signing": {
    "signed": false,
    "timestamped": false
  },
  "generatedAt": "fixture",
  "sealedContent": [
    "CLOUD EVIDENCE COLLECTION CERTIFICATE",
    "Template: cloud-evidence",
    "",
    "Case: Microsoft 365 evidence export (CASE-CL)",
    "FIR: FIR-2026-77",
    "Analyst: Pallavi Pawar",
    "Organisation: Innovativa SoftTech",
    "cloud.provider: Microsoft",
    "cloud.account: contoso.onmicrosoft.com",
    "cloud.service: Microsoft 365 (Exchange + SharePoint)",
    "cloud.method: Purview eDiscovery export (PST + native)",
    "cloud.window: 2026-06-01 to 2026-06-20",
    "SUMMARY files=3 size=163577856 matches=3 mismatches=0 errors=0",
    "ANNEXURE",
    "  1. evidence-1.dd | 53477376 | Verified",
    "     SHA-256=874e9c3ea2b3c4dda2b3c4e5a2b3c4eda2b3c4f5a2b3c4fda2b3c505a2b3c50d",
    "  2. evidence-2.dd | 54525952 | Verified",
    "     SHA-256=913213d9a3b4c5dea3b4c5e6a3b4c5eea3b4c5f6a3b4c5fea3b4c606a3b4c60e",
    "  3. evidence-3.dd | 55574528 | Verified",
    "     SHA-256=9b158b74a4b5c6dfa4b5c6e7a4b5c6efa4b5c6f7a4b5c6ffa4b5c707a4b5c70f",
    "VERIFICATION verified=3 failed=0 errors=0",
    "DECLARATION I certify that the data listed in the annexure to this certificate was collected from the cloud provider and account identified above, by the recorded method and within the recorded window, that the cryptographic hash values of the collected items were computed with e-Dex and are reproduced in the annexure, and that the verification result stated above reflects, accurately and completely, the integrity of the collected items as against the recorded values."
  ]
}