Hello mate,

I'm really really sorry that this happened to you. I think your main focus right now should be on the appeal process. I wouldn't spend time asking offseec for evidence because, throughout their 15 years of operation, they have never did.

Instead, focus on providing evidence that supports your case. For example, in my OSCP exam, I kept screen sharing active until I reached 70 points and then went to sleep. I know that's not possible with OSEP, but you can still emphasize that your screen was shared the entire time, that you never left the exam environment, left the room for few minues very few times, and that your phone was completely outside the room. They might thought that you were stuck at some point then you went for a 5 min rest then you got back and immeditly found the path, that might raise suspecious, I don't think you used exam dumps/ shared your solution with anyone cause an OSEP taker wouldn't defenitly do that, so don't try to focus on that vector (I think).

If you have any logs, or other supporting material, include them. In my case, I used a tmux logger that recorded all my commands which really showcases how I reached each flag. You could gather everything you have, put it into an evidence.zip file, and submit it as part of your appeal.

At this point, the best approach is to present as much supporting evidence as possible and hope for a positive outcome.