War crimes and cultural heritage: what an image of destruction can actually prove

365 ALTERAM analysis

Separate the damaged site from the individual allegation

A photograph of a destroyed monument can be powerful evidence of harm. It cannot, by itself, establish who ordered the attack, who participated or what each person knew. In a war-crimes investigation, the forensic task is to identify which proposition each source supports and where an additional evidential step is needed. That discipline protects both accurate attribution and the recognition of victims’ losses.

Cultural-heritage investigations require more than a collection of striking images. They need a reproducible incident record linking the location, sequence of damage, source provenance and alleged individual conduct. The Al Mahdi case provides a public judicial reference point; it does not justify assuming that every later case presents the same facts.

Public record

Public record: conviction, sentence review and reparations

On 27 September 2016, the ICC convicted Ahmad Al Faqi Al Mahdi as a co-perpetrator of attacks against religious and historic buildings in Timbuktu in June and July 2012. He had admitted guilt concerning ten monuments. The Chamber imposed nine years’ imprisonment, considering the gravity, individual circumstances and mitigating factors including cooperation, remorse and initial reluctance. These were findings following an accepted admission, not merely untested allegations. [1]

On 25 November 2021, an ICC sentence-review panel reduced the sentence by two years and set completion for 18 September 2022. The Court identified considerations including cooperation, resocialisation, possible instability and the views of Mali and victims. Its announcement does not attribute the reduction to forensic counter-expertise or a reversal of guilt. [2]

A later ICC publication, dated 3 July 2026, reported completion of the reparations programme as of 31 March 2026. Reparations implementation is a separate issue from the earlier imprisonment decision. This later development matters when presenting the case historically. [3]

365 ALTERAM analysis

Build a site-by-site evidence register

For a new instruction, start with one record per alleged attack location. Retain the original source files where lawfully available, document acquisition and preserve integrity checks. Distinguish an original recording from a downloaded copy, edited compilation, screenshot or later reconstruction. An integrity hash establishes consistency after preservation; it does not prove that the original scene was authentic.

Link each item to the precise structure and visible features. Compare pre-event photographs, architectural records and independently sourced imagery. Record uncertainty where a location cannot be resolved. Several publications may reproduce one recording, so repetition must not be counted as independent corroboration.

Date the material cautiously. An upload time is not necessarily a capture time; missing metadata does not automatically indicate manipulation. Establish time ranges using corroborated events and explain conflicting clocks. Where access or source quality prevents a reliable determination, state the limitation.

365 ALTERAM analysis

Test conduct and authority separately

Create a second register for propositions about the individual: presence, physical participation, instructions, knowledge and claimed authority. Identify the source supporting each proposition and the inference connecting it to the allegation. A person appearing near a damaged site may be identifiable without the image establishing when the damage occurred or what they directed.

Compare recordings with witness accounts, communications and available administrative records. Translation choices, speaker identification and the surrounding exchange can affect the meaning of a purported instruction. Keep original-language material available for qualified linguistic review. Counsel must assess the legal mode of responsibility; an investigator should not substitute an organisational title for evidence of actual conduct.

Alternative explanations must face the same scrutiny as the prosecution account. Clear footage, independently corroborated instructions or reliable admissions may strengthen attribution. A review that identifies only favourable fragments while omitting adverse material undermines its own usefulness.

365 ALTERAM analysis

Make the findings usable without rewriting the case

The deliverable should connect a site chronology, source register and individual-role matrix, with explicit confidence levels and unresolved questions. Explain which findings concern physical damage, attribution or the extent of involvement. Do not turn uncertainty about one proposition into a blanket denial of documented harm.

365 ALTERAM’s war-crimes review service supports qualified counsel through incident reconstruction, imagery and digital-provenance assessment, witness comparison and individual-role analysis. These methods can clarify the factual basis for trial or sentencing submissions. They cannot promise a lower sentence, and the Al Mahdi sentence review is not evidence of such a promise.

For defence teams, the practical instruction is specific: commission review of the evidential links that carry the individual allegation. The result may challenge, qualify or confirm them. A fair assessment requires all three possibilities to remain open.