HEX-Expert is a system of professional tools for the forensic examination of media files within the framework of computer-technical examination and forensic examination of video and sound recordings.
Depending on the tasks to be solved the complex may include an additional module FAT-Expert for device memory analysis.
HEX-Expert allows to establish the presence or absence of traces of modification or editing in the file structure, its metadata, compare the evidence with files obtained from known sources, identify a video/audio recording device both by the properties of the recorded file and by the device memory management method.
The study of the device’s drives reveals the features of the formation of data sequences in the memory and their placement, allowing to establish whether the evidence recording was created using this device or copied to the drive from an external source.
The original method of drive structure data graphical representation allows to set the data management method implemented in the recorder.
File Header Examination includes detailed analysis of the header and its compliance with the file format standard. Metadata analysis reveals signs of editing using specialized software tools.
The system allows to analyze data in hexadecimal representation with the possibility of interpreting them as a sequence of data of various types, searching traces of codecs or specialized audio/video editing software, conduct a detailed analysis to determine the characteristics of the recording device or software used to create the file or modify it.
Frame Allocation Map is a unique tool for establishing the authenticity of a video/audio recording and allows to detect changes that have been made to the evidence file without opening it using specialized video or audio editing software application.
Interstream Analysis includes extraction and comparison of the continuity features and synchronization of video and audio stream, as well as other streams available. Comparison of data obtained from different streams complement each other and helps to identify traces of editing and manipulation.
Identification of the audio/video recorder is the most important task in establishing the recording is original.
Automatic extraction of identification features allows to compare the characteristics of the evidence media file received for research with the characteristics of the files available in the expert's database.
The software is protected
by USB dongle;
Installation on multiple
workstations is allowed;
Phone/Fax: +7 (495) 679-19-28
Moscow, st. 5th Kozhukhovskaya, 22, bldg. 1, 15A