Is there any forens...
 
Notifications
Clear all

Is there any forensic use of metadata from video files?

greyyit
(@greyyit)
New Member

What (if any) is the forensic use of metadata from video files? Is there any video file format that has useful information similar to jpeg?

Quote
Topic starter Posted : 12/01/2022 1:44 am
Passmark
(@passmark)
Active Member

Homework from your Uni course?

ReplyQuote
Posted : 12/01/2022 11:52 pm
greyyit
(@greyyit)
New Member

@passmark Oh no I didn't mean for it to sound like that.  I'm just curious about metadata in videos because there doesn't seem to be any standard like there is EXIF for images.  Information seems to be hard to find.

ReplyQuote
Topic starter Posted : 13/01/2022 1:35 pm
mscotgrove
(@mscotgrove)
Senior Member

There are no standards for video files.  Many variations of video, but the most common is probably MP4, but MP4 is largely a shell around 'modules' or Tracks.

Metadata you can find in videos also depends on the camera used.  There are normally dates, and many new devices also contain GPS information.  Other metadata may include frame rates, resolution etc, but that may not be the 'forensic' data that interests you.

ReplyQuote
Posted : 16/01/2022 11:55 am
greyyit
(@greyyit)
New Member
Posted by: @mscotgrove

There are no standards for video files.  Many variations of video, but the most common is probably MP4, but MP4 is largely a shell around 'modules' or Tracks.

Metadata you can find in videos also depends on the camera used.  There are normally dates, and many new devices also contain GPS information.  Other metadata may include frame rates, resolution etc, but that may not be the 'forensic' data that interests you.

That explains why I wasn't able to find much on Google, thanks!  Out of curiosity, what OS runs on cameras these days, specifically GoPro?  Are there any known standard operating systems specific to cameras, aside from the obvious Android/iOS for mobile devices?

 

ReplyQuote
Topic starter Posted : 19/01/2022 8:06 pm
mscotgrove
(@mscotgrove)
Senior Member

@greyyit I have no knowledge about operating systems for GoPros.  All I see are the memory chips that can be FAT32 for 32GB and exFAT for larger than 32GB

ReplyQuote
Posted : 19/01/2022 8:10 pm
greyyit
(@greyyit)
New Member

@mscotgrove Ok, I've heard Canon uses DryOS now, and was just wondering if my GoPro had a similar OS or just normal firmware.

ReplyQuote
Topic starter Posted : 19/01/2022 8:34 pm
Ahsan
(@ahsan)
Member
Posted by: @greyyit

What (if any) is the forensic use of metadata from video files? Is there any video file format that has useful information similar to jpeg?

Metadata means "Data about Data" and it is very important for a forensic analyst during an investigation. It contains alot of critical information i.e. location, device make/model, timestamps etc. Such kind of information is embeded in photo/vidoes bydefault when taken from any digital device

I am sharing the link of a related "Forensic Focus post". Check it out, I hope it may help you in any regards. 

https://www.forensicfocus.com/forums/postid/6599106/

ReplyQuote
Posted : 20/01/2022 3:08 am
mscotgrove
(@mscotgrove)
Senior Member

@greyyit Forensically, I am not sure that the camera operating system is important.  What matters is what is written to the memory chip.

One interesting point I have occasionally hit is how much data (on a GoPro) is lost after a serious impact.  On a few (unfortunately) fatal accidents the data recorded has been truncated by 1-2 seconds.  The video had to be reconstructed as the metadata (moov atom on an MP4) had not been created.  In these cases, there was no real metadata to be examined, but the video was made viewable.

ReplyQuote
Posted : 20/01/2022 9:44 am
greyyit
(@greyyit)
New Member

@ahsan I'm checking that out now, thanks!

ReplyQuote
Topic starter Posted : 20/01/2022 6:58 pm
proff bill
(@proff-bill)
New Member

During an investigation, forensic analysts will want access to "data about data" (metadata). It contains vital information in addition to the object's position, model, and time stamp. Images and films captured with digital cameras and camcorders are automatically enhanced with information. Video files, on the other hand, are completely unrestricted. The most popular video format is MP4, which is just a container for audio and video data that is divided into "modules" or "tracks." It is important to use the correct camera while making a video in order to get the most out of it. Nowadays, dates and GPS data are often included. For "forensic" statistics such as frame rates and resolutions, you should go elsewhere.

ReplyQuote
Posted : 19/03/2022 9:19 am
Share:
Share to...