What (if any) is the forensic use of metadata from video files? Is there any video file format that has useful information similar to jpeg?
Homework from your Uni course?
@passmark Oh no I didn't mean for it to sound like that. I'm just curious about metadata in videos because there doesn't seem to be any standard like there is EXIF for images. Information seems to be hard to find.
There are no standards for video files. Many variations of video, but the most common is probably MP4, but MP4 is largely a shell around 'modules' or Tracks.
Metadata you can find in videos also depends on the camera used. There are normally dates, and many new devices also contain GPS information. Other metadata may include frame rates, resolution etc, but that may not be the 'forensic' data that interests you.
There are no standards for video files. Many variations of video, but the most common is probably MP4, but MP4 is largely a shell around 'modules' or Tracks.
Metadata you can find in videos also depends on the camera used. There are normally dates, and many new devices also contain GPS information. Other metadata may include frame rates, resolution etc, but that may not be the 'forensic' data that interests you.
That explains why I wasn't able to find much on Google, thanks! Out of curiosity, what OS runs on cameras these days, specifically GoPro? Are there any known standard operating systems specific to cameras, aside from the obvious Android/iOS for mobile devices?
Â
@greyyit I have no knowledge about operating systems for GoPros. All I see are the memory chips that can be FAT32 for 32GB and exFAT for larger than 32GB
@mscotgrove Ok, I've heard Canon uses DryOS now, and was just wondering if my GoPro had a similar OS or just normal firmware.
What (if any) is the forensic use of metadata from video files? Is there any video file format that has useful information similar to jpeg?
Metadata means "Data about Data" and it is very important for a forensic analyst during an investigation. It contains alot of critical information i.e. location, device make/model, timestamps etc. Such kind of information is embeded in photo/vidoes bydefault when taken from any digital device
I am sharing the link of a related "Forensic Focus post". Check it out, I hope it may help you in any regards.Â
@greyyit Forensically, I am not sure that the camera operating system is important. What matters is what is written to the memory chip.
One interesting point I have occasionally hit is how much data (on a GoPro) is lost after a serious impact. On a few (unfortunately) fatal accidents the data recorded has been truncated by 1-2 seconds. The video had to be reconstructed as the metadata (moov atom on an MP4) had not been created. In these cases, there was no real metadata to be examined, but the video was made viewable.
