It’s hard to imagine our modern-day world without video surveillance cameras, smartphones, tablet cameras, dashboard cameras, action cameras, and body cams. Thousands of cameras capture thousands of different events. Like unbiased witnesses, they are ready to share what they saw. Thus, when it comes to crime investigations, it’s not surprising that video recordings become an imperative form of evidence. However, it’s not uncommon for a recording’s setting, camera’s technical features, and other factors to impact the quality. Sometimes, there’s no certainty that the video reflects real events.
As a result, the involvement of video forensics is often necessary for a video recording to contribute to uncovering the truth. These experts leverage their expertise and specialized equipment to ensure that video recording can serve as uncontested and informative evidence during legal proceedings. Investigators need to overcome many challenges, and even simple videos can present significant problems. There are dozens of modern digital recording formats and analog recordings. In many cases, law enforcement agencies are limited in their ability to reconstruct this data.
Converting video to a necessary format cannot be reliably achieved by simply using general-purpose consumer software. Innumerable surveillance system models have their own video formats without user-friendly and easily obtainable converter formats. Even if these conversion tools exist, there’s no guarantee that conversion will not destroy the image’s microscopic details that will be critical in the future. An expert with video coding training and reliable video forensic equipment gives you the best chance at an accurate outcome.
Expert involvement is also critical when video is damaged. For instance, a dash cam captured the entire incident while the camera was functional, and the data remains on the memory card. The last recorded video that captured an impact cannot be reproduced using regular tools. In this case, experts can often compile small fragments of video data in the right sequence. This technique can enable the reconstruction of video captured seconds before the impact, which can then be presented during court proceedings.
Retrieval of necessary information often requires more than just viewing the video. For instance, multiple cameras can record the same event. If recordings are reproduced one after the other, it’s hard to match details. It’s much easier to accomplish this by analyzing all recordings simultaneously. But, first, recordings need to be synchronized. Synchronized recordings allow investigators to view events from different angles and capture critical details.
Expert contribution is often required when a video is missing the necessary details. It can happen for various reasons:
The camera’s characteristics, such as resolution and frame dimensions, also impact quality.
Taking all these factors into consideration, it’s not guaranteed that a video can clearly capture a car’s license plate or criminal’s face.
When it comes to forensic video enhancement, it’s naïve to expect a miracle from an expert, similar to stories shown in fictitious crime shows. However, modern video enhancement software can sometimes produce miraculous results.
This complex task is accomplished through two phases. During the first phase, forensic experts evaluate the video to determine whether it is an original or a copy. The term original video is only used to refer to the video captured on the device during recording. Copying can simply mean that the video file was copied on a different device, the device that was not used during video recording. Copying can also refer to editing the file format, such as resampling and recompression. An expert trained in video coding from different devices and video editing can help conclusively indicate the video’s authenticity.
The best way to distinguish between an original and a copy is to obtain a video copy recorded on the same device as the video in question. Discovering recompressed video raises a red flag for a video forensic expert. Video recompression can indicate video editing.
However, recompressed videos are not always fabricated. For instance, all YouTube videos are recompressed, yet very few YouTube videos were edited from the original.
As a result, the most complicated part of authenticity determination is finding the remaining evidence of counterfeit videos. Sometimes, easily observed, simple artifacts can serve as this proof. For instance, a suddenly appearing object in the video frame or hands of a clock that rapidly changed to a new time can prove that the video is a fake.
Professional forgery is not easily detectable without special tools such as modern forensic software. In this case, forensic experts can conclude the video’s authenticity by closely inspecting various qualities of the video, such as video format, coding parameters, file structure, metadata, and, more importantly, verification of the image in every frame. It’s a very tedious and lengthy process. Without performing this analysis, experts can’t be confident that the video depicts real events and not what someone wanted us to see.
From time to time, experts are presented with a new challenge – source camera identification. This is a specialized area of forensic analysis requiring advanced tools and expertise. Experts need to record dozens of frames in a specialized setting using proven devices. After that, specialized software will isolate the camera’s imprint. Camera imprints are an image fragment that cannot be seen with human eyes, and that remains the same in all images. Collected imprints are then compared against imprints on proven authentic videos and photos. This explanation might lead the reader to believe that camera identification is simple, but it’s not true. The captured image’s quality determines the simplicity with which forensic software will discover camera imprints. Poor image quality can even produce invalid data imprints. In order to arrive at the correct conclusion, experts need to have a deep understanding of “imprint” search algorithms, video comparison techniques, and software data interpretation skills.
Forensic expert’s contribution doesn’t stop even after proving the video’s authenticity, enhancing its quality, and ensuring that all stakeholders can view it. Why? Because it’s not enough to see a vehicle on a video. It’s vital to be sure that a specific vehicle is shown, or, at the very least, to prove that the vehicle’s make is within the scope of the investigation.
Thus, object identification comes into play. In order to solve this issue, experts need to find identifying characteristics using an image. These characteristics need to distinguish an image from thousands of similar images. Next, it’s vital to compare a verifiable object’s characteristics against duplicate object’s characteristics. This job is similar to a child’s “Spot the Difference” game. A forensic expert’s ability to skillfully play this game can impact the destiny of stakeholders involved in video investigation.
During investigation, questions can arise about size and distance. Forensic photogrammetry, a branch of video forensics, can provide the answers. An individual with the knowledge of simple rules of advanced spatial geometry can solve this riddle using established geometric measurement principles and forensic modeling tools. When a computer performs geometric measurements, results will be obtained more rapidly, and data will be more accurate.
However, advanced spatial geometry is not always enough. Luckily, modern computers have the capability to produce 3D models of geographic areas and objects. Forensic engineers can determine several points with known coordinates on video or images, easily calculate coordinates of other points, and determine the distance between these points.
An image can demonstrate the distance between two objects. A video can also determine the time between the events. When distance and time are known, speed can easily be calculated. Cases that involve the determination of guilt after a vehicular accident often require calculation of speed. Accumulated forensic expertise and video forensic methodologies allow experts to determine the speed under different conditions. Many factors are at play, such as the time of day, distance from the subject of the recording, and movement of the camera. However, vehicle speed can often be estimated using forensic measurement methods.
Video forensics can’t solve all riddles. However, experts know that even the tiniest details can make a significant impact during an investigation. Video forensic experts are not magicians, but they still try to work toward reputable and actionable findings.
Do you know there is something that needs to be uncovered, but you’re not sure how to go about it? Do you have a suspicion, but you don’t know where you need to start looking to find evidence to back that suspicion up? Are you unsure if you just need a report for your own personal piece of mind, or if you might need something that will hold up in court later on down the road?
We understand that a digital investigation can be a daunting task. We are here to help. We make it easy to get your digital investigation off the ground. We’ve tailored our digital investigation services to make it easy for you to know where to look for evidence, know what to expect from a full digital investigation, and much more.
We offer three options based on how quickly you’d like your investigation to be completed. These options do not include a full investigation (personal or forensic) report. These Digital Investigation Starter options are designed to help you determine if a) a full forensic investigation is the right option for you, b) what the steps you need to take are, and c) what a full forensic investigation will cost you. One of these options will ensure that you have an account representative available to answer all the questions you have about digital forensic investigations, how they work, and how they apply to your personal situation.
Once you’ve chosen your dedication level, we will provide you with your Getting Started Report, which will include the price for your full digital investigation (step two). Ready to get started? Still have questions? Don’t wait, call us today! 800-849-6515
Gathering, and properly preserving, evidence in a digital world is more than just making print outs. What is visible on a website one day, may be gone the next. When your court case could hinge on evidence present online, having accurate, defensible, and properly preserved evidence is crucial.
When evidence is present on a website - any website - that you want to use in court, it’s important to have a copy of that evidence in a form that can be verified to be an accurate representation of the original data. While you can print physical images of the site, if the opposing counsel contests it, you may find all your hard work and important evidence is thrown out. Digital Forensics Corp’s Website Preservation services offer online evidence preservation by a neutral 3rd party that can include signed certification stating the authenticity of the evidence.
We utilize specially designed tools that look at a given website and collect the data from that website, recreating it in its entirety. This data can then be archived in a variety of ways, making it a static, irrefutable piece of evidence that you can later use in court. No matter what happens on the website between now and the time you need the evidence, you will still have access to the evidence that is most important to you.
When we collect and preserve a website for you, you don’t just get simple screenshots of the page. The data we gather allows us to rebuild the webpage for you - and it this same data can be used to rebuild the webpage by other parties at a later date, if needed. The data we collect includes the rebuilt page, the HTML source codes, and even MD5 hash data that can be used to verify the content.
If it is online, we can most likely preserve it for you. Social networking sites, business sites, blog sites, personal sites - all of these can be preserved. Preservation can be done quickly, and can even start with the page(s) on the site that are most relevant to your case - before the site content can be changed or removed. We can even scan a site, only documenting pages that contain certain keywords to ensure that you get the evidence you need.
Don’t wait until the evidence you need has been removed or changed. Call us today and let us document the data that is most important to your case immediately.
Android smartphones and tablets can have a wealth of information hidden inside of them. This information can be crucial evidence in court. Whether something was deleted and you need it recovered, or you are looking for evidence that someone is hiding something from you, we can help you find what your phone or tablet is hiding from you.
The first thing to remember about smartphones and tablets is that they are just like any other electronic device: they require power to run. This means that it is necessary for the device to power up before any data can be recovered or gathered from the device. But because our techs use state-of-the-art tools to investigate your device, it is not necessary for the screen to work. So whether you have a device in perfect working order, or a device with a screen that can be partially read, or not read at all, as long as the device can be powered on, our team of talented forensic investigators can help you find the evidence you’re looking for.
The first step to knowing if a device may contain evidence you need, is knowing what information can be recovered from the device. While we can’t give you details from an App history that has been deleted, we can give a lot of other useful information. This information can include:
The data gathered from Android devices can be both data that is present currently, as well as data that has been deleted. We can never guarantee how much deleted data will be recoverable, due to the way that the memory overwrites old data, but often deleted data is important information you did not know the device still contained.
While recovering data from a factory reset device is harder than recovering data that was just deleted, it can still be done. This type of evidence can be used in court, but it is important that we know you are attempting to recover data that you will be using in court. This ensures that our processes are thoroughly documented and can be reproduced by other experts if needed. If you’re looking for one particular message or picture or email, we can’t promise that we can find it. But even after a factory reset, much of the data is still present in unallocated spaces of the phone’s memory, especially if you haven’t been using the device.
If you know you need data recovered from a factory reset device, stop using it immediately. Power down the device and kept it powered off. Even the data that needs to be written to keep the device running can overwrite critical data, leading to that data being unrecoverable. The less uptime your device has after it has been reset, the more data we can recover for you.
We support virtually all makes and models of Android tablets and phones. Old or new, we can recover data from your Android device.
Because the list of Android devices that are out on the market is so extensive, there is no way we could possibly list them all here. If you have a device that you think may not be supported, please contact us today, and we can verify whether or not the device is supported. Keep in mind, that even if your device is supported, that doesn’t mean we can guarantee your particular device is in a condition that will allow data to be read or extracted. Each case is unique, and many factors go into determining what data can be accessed on a given device.
When you need to recover data from a smartphone or tablet to gather evidence that you want to use in court, knowing where to turn can be confusing. Most reputable data recovery companies do not recover data from smartphones (especially iPhones). Even if you purchased a program that was able to recover the data you needed at home, would the court accept it? Don’t worry, at Digital Forensics Corp, we specialize in finding the information you need, and providing it to you in a way that is useful for your situation.
At Digital Forensics Corp, we understand how important the information on your mobile device is to you. We can duplicate and document any evidence that is present on your mobile device in a way that you can utilize in court. We can recover data that was accidentally or purposely deleted. We can even recover data from devices that have been factory reset! Recovered data can include:
The data that we can recover, gather, and document for you is dependent upon both the device and the version of the operating system that is installed. Devices must power on and boot properly for data to be gathered, but we can often repair and stabilize devices that are not working enough for you to gather your own evidence. Don’t risk potentially corrupting your evidence by trying to recover it yourself. Let our experts help you today.
