PRESSZEUG Forensics
PRESSZEUG Forensics is a WordPress activity log with retrospective forensic analysis. It records meaningful changes from the moment it is activated and can also investigate earlier changes using evidence WordPress or supported editors already stored. Traditional activity logs start recording when th
PRESSZEUG Forensics is a WordPress activity log with retrospective forensic analysis. It records meaningful changes from the moment it is activated and can also investigate earlier changes using evidence WordPress or supported editors already stored.
Traditional activity logs start recording when they are activated. PRESSZEUG Forensics can additionally examine existing WordPress and Elementor revisions, metadata, update information, and selected local file timestamps. This means an investigation can begin even after a change or incident has already happened.
Retrospective analysis is evidence-based: PRESSZEUG Forensics can only show what WordPress or a supported integration actually stored. It cannot recreate events for which no evidence exists.
The focus is on meaningful changes rather than ordinary admin navigation.
Typical investigation questions
PRESSZEUG Forensics is designed to help answer questions such as:
- What changed on this WordPress site?
- Which WordPress account was associated with a change?
- What exactly changed inside an Elementor page?
- Was a plugin or theme installed, updated, activated, deactivated, or deleted?
- Can existing revisions reveal a change that happened before PRESSZEUG Forensics was installed?
- Which stored evidence is available for a specific time window?
WordPress Core auditing
PRESSZEUG Forensics can record and investigate changes involving:
- Pages, posts, comments, and taxonomies.
- Users, roles, successful logins, logouts, and optional failed-login events.
- Plugin and theme activation, deactivation, deletion, installation, and updates.
- Relevant WordPress settings and revision evidence.
- Compact before/after information for supported content changes.
- A live presence view that separates recent authenticated activity from merely valid WordPress sessions.
