Description
VD Expert is a system for forensic video investigation – a set of professional instruments for video editing detection.
VD Expert is a set of special tools designed to detect video modification during forensic study when the video recording stands as evidence in a case: video stream authentication, revealing changes in the sequence of events or their content, image enhancement, identification of the video recording device.
VD Expert was developed together with forensic experts and practitioners during real case studies and uses six main approaches to addressing the issue of video authenticity:
- investigation of the video recording device memory;
- file header and file structure analysis;
- intraframe analysis (image research);
- interframe analysis (establishment of recording continuity);
- inter-stream analysis (synchronization of the video and audio sequence of the video recording);
- video/audio device identification.
Device's storage examination
device's storage examination reveals the features of the data sequences formation/ This allows to establish whether the video evidence was recorded using this device or copied to the storage device from an external source.
File Header Examination
includes a detailed analysis of the file header and file structure verifying its compliance with the file format and recording format standards. The frame allocation map reveals the order of frames (and its violations). Metadata analysis reveals signs of editing using specialized software tools.
Intraframe analysis
includes a set of tools for image authentication: collection of filters and research methods that reveal signs and features of image manipulations and editing via video frame images content.
Interframe analysis
represented by a set of tools that allows to establish the continuity of the recording. Nowadays, this is the most productive way to study video recordings for authenticity - the study of technical characteristics (extracted directly from the video signal) continuity changes. In most cases these technical characteristics are out of video recording operators’ control or the person who edits the original video material. Electrical Network Frequency (ENF) is an example of such a parameter. ENF database is provided by electrical power provider company. Comparison of ENF database and ENF trace extracted from the video signal proves the exact date and time of the recording, as well as its continuity.
Interstream Analysis
includes the research of synchronization between audio and video stream of the evidence. Comparison of video and audio signals behavior reveals traces of editing and manipulation, complementing each other.
Video/Audio Recording Device Identification
includes the recording device analog and digital features analysis by evidence and test video recording comparison. Every approach listed above provides its own contribution into recording device identification: FAT analysis, file header and structure analysis, intra- and inter-frame analysis, inter-stream analysis and PRNU analysis (revealing the individual video recording device matrix characteristics). The unique functionality implemented in VD Expert allows the user to extract and analyze video recording editing traces and to export the results to the expert's report.
Functionality
Basic:
- Forward and reverse playback, playback of video streams simultaneously with audio streams;
- Zoomed video playback with and without interpolation;
- Export of separate frames or a sequence of frames without quality loss;
- Playback after applying image processing, deinterlacing;
- Display brightness histograms for different color channels.
Special:
- Analysis of media storage media with FAT16 and FAT32 file systems;
- Extraction of specific features of data allocation in the device’s memory;
- unique file features and properties extraction;
- File structure analysis;
- File format and recording format Standards compliance, service fields fill control;
- Interpretation of data sequences as different variables types;
- Extracting specific codec information (including date and time recording settings);
- Metadata analysis;
- Frame allocation map, being a unique tool for analysis of the data placement in the file structure.
Image analysis:
- Histograms of color channels, integral brightness;
- ELA analysis;
- Median, threshold, autorange filters;
- Canny filter (borders);
- Gradient filters (Sobel, Sharr).
Interframe analysis (analysis of video continuity):
- Frame difference filter;
- Brightness dispersion analysis;
- Automatic recognition of the time stamp and its compliance with presentation time stamp (PTS);
- Harmonic’s continuity analysis;
- Detection of repeated frames, clone frames;
- Detection of repeating sequences of frames (“copy-paste”) - the unique automatic tool for confirming the video evidence authenticity;
- Electrical Network Frequency (ENF) analysis;
- Audio stream analysis (energy, spectrogram).
Video Recording Device Identification:
- Video Recording Device Identification:
- PRNU analysis.
Supported formats
Display and frame positioning for all general video file formats: MPEG-4/QTFF (*.mp4, *.mpv, *.mov, *.3gp, *.3g2), ASF (*.wmv, *.asf), RIFF AVI (*.avi), Matroska (*.mkv), FLV (*.flv, *.swf), h264 (*.h264, *.264, *.psf, *.dav, *.avc), MPEG_PS ( *.mpeg, *.mpg, *.mod,*.vob), MPEG_TS (*.mts, *.m2ts), images (*.jpeg, *.bmp, *.png).
Advantages
- Unique technologies for forensic analysis of video recordings;
- Video stream continuity approval;
- Automatic detection of matching video fragments (fragments “copy-paste” detector);
- Previous coding traces detection tools(including the location of key frames);
- Image authentication tools;
- Automatic date and time stamp recognition;
- Identification of the video/audio recording device;
- Export of results in textual and graphical form for the expert’s reporting.
License
The software is protected by
USB dongle;
Installation on multiple workstations is allowed;
The license
is lifetime.
Phone/Fax: +7 (495) 679-19-28
Moscow, st. 5th Kozhukhovskaya, 22, bldg. 1, 15A
E-mail: info@ot-contact.com
