online efterforskning
The use of internet-based tools, digital records, and electronic communications to investigate suspected crimes, encompassing both law enforcement activity and open-source research by journalists and private individuals.

Definition
Online investigation refers to investigative techniques that utilize internet platforms, digital records, social media content, and electronic communications to gather evidence, identify suspects, verify timelines, or reconstruct criminal events. In the context of federal law enforcement, such investigations are typically conducted under statutory authority, most notably 18 U.S.C. § 2703 of the Stored Communications Act, which governs the compelled disclosure of stored electronic communications and associated records from service providers.
Law enforcement online investigations may involve multiple layers of digital evidence collection. Officers may begin by reviewing publicly accessible social media profiles, forum posts, and website content that requires no legal process to access. When deeper access is needed, investigators follow statutory procedures to obtain subscriber information, transactional records showing communication patterns, and in some cases the actual content of stored messages. Each level of intrusion requires a corresponding level of legal justification, ranging from administrative subpoenas for basic subscriber data to full search warrants for message content.
Beyond formal law enforcement activity, online investigation has become a significant tool in true crime journalism and amateur research. Private individuals and reporters routinely use open-source intelligence techniques to examine public digital footprints, archive web pages before they disappear, cross-reference social media accounts, and map networks of relationships. This form of citizen investigation has occasionally generated leads in cold cases or identified inconsistencies in official narratives, though it also raises concerns about vigilantism, misidentification, and interference with ongoing investigations.
The term itself carries no statutory definition in federal criminal law; it is a descriptive phrase for a collection of practices that have evolved alongside internet technology. Digital evidence obtained through online investigation is subject to the same authentication, relevance, and admissibility standards as physical evidence when presented in court. The legal framework continues to develop as courts balance Fourth Amendment privacy protections against the government's investigative needs in an increasingly digital society.

