Forensic Analysis of Time Markers of Digital Recordings
https://doi.org/10.30764/1819-2785-2021-1-69-77
Abstract
The article presents the results of summarizing expert practice on the examination of the features of digital video and sound recordings, which make it possible to determine the time of file creation and date of the recorded events. The author introduces the concept of “time marker” and proposes the classification of time markers in the file name, time attributes, and metadata by form and source of origin. The basic principles of time representation by various file systems are stated. The relationships between different time markers for original records and records made in other ways are analyzed. The article provides examples of using time markers to diagnose the method of making a record.
Various types of time markers that are part of the recorded signal are considered. It is shown which of the recorded events can act as time markers. The author also analyses the possibility of dating using astronomical events. Differences between absolute and relative dating are considered concerning the study of audio and video files. Conclusions are drawn about the significance of the study of time markers for diagnosing the method of making a signalogram, performing relative or absolute dating of recorded events, or technological processes of making a signalogram.
About the Author
S. M. Petrov
Kaliningrad Laboratory of Forensic Science of the Ministry of Justice of the Russian Federation
Russian Federation
Russian Federation
Petrov Sergei Mikhailovich – Head of the Forensic Examination Department
Kaliningrad 236035
References
1. Khurtilov V.O., Nazarova T.V., Manyanin P.A., Serebryakov I.A., Lebedev K.A. Typical Technique for Technical Research of Phonograms. Moscow: EKTs MVD Rossii, 2009. 96 p. (In Russ.)
2. Kochetkov A.T., Materkin V.A., Okhotnikov A.A. Videogram Forensic Research. Information Letter. Moscow: EKTs MVD Rossii, 2003. 24 p. (In Russ.)
3. Kaganov A.Sh. Means of Phono and Video Technology as a Source of Evidentiary Information. In: Koldin V.Ya. (ed). Material Evidence. Information Technology of Procedural Proof. Moscow: Norma, 2002. P. 674–709. (In Russ.)
4. Carrier B. File System Forensic Analysis. AddisonWesley Professional, 2005. 600 p.
5. Cho G-S. A Computer Forensic Method for Detecting Timestamp Forgery in NTFS. Computers & Security. 2013. Vol. 34. P. 36–46. https://doi.org/10.1016/j.cose.2012.11.003
6. Kaart M., Laraghy S. Android Forensics: Interpretation of Timestamps. Digital Investigation. 2014. Vol. 11. No, 3. P. 234–248. https://doi.org/10.1016/j.diin.2014.05.001
7. Bradley J. File System. In: Bradley J. OS X Incident Response. Scripting and Analysis. Syngress, 2016. P. 49–89. https://doi.org/10.1016/B978-0-12-804456-8.00004-2
8. Boyarov A.G. Detecting Postproduction Tampering Artifacts in Video and Audio Recordings on FAT16 and FAT32 Formatted Storage Devices. (Methodology Recommendations for Forensic Practitioners). Theory and Practice of Forensic Science. 2014. No. 3 (35). P. 76–92. (In Russ.)
9. Wang Ch. A New Method of Measuring the Shadow Length. Proceedings of the 2016 6th International Conference on Machinery, Materials, Environment, Biotechnology and Computer (Tianjin, China, June 11–12, 2016). 2016. https://doi.org/10.2991/mmebc-16.2016.211
10. Sandnes F.E. Determining the Geographical Location of Image Scenes Based on Object Shadow Lengths. Signal Processing Systems. 2011. Vol. 65. P. 35–47. https://doi.org/10.1007/s11265-010-0538-x
11. Grigoras C., Smith J.M. Audio Enhancement and Authentication. In: Siegel J.A., Saukko P.J., Houck M.M. (eds). Encyclopedia of Forensic Sciences. Elsevier, 2013. P. 315–326. https://doi.org/10.1016/b978-0-12-382165-2.00128-8
12. Bessonov A.A., Boyarov A.G., Stepanov M.V. The Electric Network Frequency Based Method of Forensic Audio Analysis. Theory and Practice of Forensic Science. 2019. Vol. 14. No. 2. P. 43– 50. (In Russ.). https://doi.org/10.30764/1819-2785-2019-14-2-43-50
13. Garg R., Varna A.L., Hajj-Ahmad A., Min Wu. “Seeing” ENF: Power-Signature-Based Timestamp for Digital Multimedia via Optical Sensing and Signal Processing. IEEE Transactions on Information Forensics and Security. 2013. Vol. 8. No. 9. P. 1417–1432. https://doi.org/10.1109/tifs.2013.2272217
14. Pronshtein A.P., Kiyashko V.Ya. Chronology / V.L. Yanin (ed). Moscow: Vysshaya shkola, 1981. 191 p. (In Russ.)
Review
For citations:
Petrov S.M. Forensic Analysis of Time Markers of Digital Recordings. Theory and Practice of Forensic Science. 2021;16(1):69-77. (In Russ.) https://doi.org/10.30764/1819-2785-2021-1-69-77
Views:
829
Email this article 