How can Timestamp/Channel OCR feature support video forensic investigators? In the situation of the time information of a file in the filesystem is damaged or there is no time/channel information in the recovered frame, OCR can be very useful. Follow the below article and find out how MD-VIDEO recognizes and captures the time and channel information displayed on the frame using the OCR feature.
How to operate Timestamp/Channel OCR feature?
Check the target to be analyzed and click Time/Channel OCR from the menu. Select the Range of the target and drag to include the Time or Channel information on the frame.
After selecting the range, set the timestamp format accordingly, if you don’t see the matching timestamp format, select ‘Custom template’ and make a new one.
Review the Timestamp/Channel OCR analysis results
The OCR analysis results are displayed in OCR Timestamp and OCR Channel. If the OCR result is not correct, it can be modified by entering a value in the Attribute tab.
Samsung Full Filesystem Extraction for Android 11 – Supports 20 models of Galaxy S10, Galaxy Note10 Series with Exynos Chipset. Huawei Kirin 970/980/990/9905G Chipset Full Filesystem extraction – Supports 32 models including Honor Note 10, P20, P20 Pro, Mate 10, Mate 10 Pro, Mate 20, Mate 30 Series. Physical Extraction for Windows mobile – Supports 63 models including Lumia 540, Lumia 1520. Android Live enhancement – Scan for apps in Secure folder, improved App Downgrade, enhanced notification, and restoration. Image Filesystem Verification
MD-RED v3.7.23~v3.7.36
Extraction images acquired by Cellebrite UFED – Improvements of iOS analysis script set up when adding .dar image(iOS Full Filesystem image file acquired with Cellebrite tool) to case. Improved analysis of extracted image information stored in UFED PA data file (*.ufd).
MD-LIVE v3.4.1∼v3.4.3
Watch List – New feature for users to manage the Watch List of major apps to investigate. Keyword management – Various keywords can be imported and exported.
MD-VIDEOv3.6.0∼v3.6.2
Car plate number recognition – Recognizes the car plate numbers in the low-resolution video stream can be guessed by the accuracy percentage. MD-VIDEO AI analysis performance – Improved by over 45%. New model support – DVR(3 Models), Dashcam(7 Models).
MD-CLOUD v1.6.0
Location Information & Timeline – Improved analysis performance of Location Information and Timeline display.
Download the document and find out more about released features!
In this article, you can learn how to enhance video and image using advanced enhancement features in MD-VIDEO. Even if the video you are investigating is blurry, shaky, dark, small, MD-VIDEO can improve and secure better visibility with various enhancement features. It’s a powerful feature to find the key frame from multi aspects including basic adjustment features, deblurring, super-resolution, and perspective transformation. You don’t need to find other video or image editors. Follow the below how-to tips, MD-VIDEO can help you to increase your video investigation efficiency and let you get close to the key evidence! If you want to learn more about enhancement features, go find our Youtube channel.
Basic Enhancement
Basic enhancement feature includes Brightness/Contrast/Gamma/Color/Edge Sharpening/Noise Reduction. You can apply these filters to the dark videos like this sample video as below. We hardly see the people beside the highway, but after the brightness adjustment, we can clearly find people on the bridge and even the text on the vehicles.
Advanced Enhancement – a. Super Resolution
Super-resolution can magnify the analysis results with high quality compared to the common magnification. With this sample video, we’ll try a super-resolution feature to the car plate on the taxi. MD-VIDEO supports 3 types of super-resolution, EDSR/ESPCN/FSRCNN. EDSR has the best quality of performance, but it may take a lot of time, so we recommend using a GPU. Apply crop and rotate feature in advanced, and select super-resolution then set the scale level. You can check the adjustment result from the canvas and try additional enhancements to have better visibility.
Advanced Enhancement – b. Motion Deblur
Shaky images can be improved with the Motion Deblurring feature. If you want to have the clear text from the moving object, the following enhancement tips can help you. Capture the frame and crop the only necessary part then select the Motion Deblur menu. Make an adjustment of Length, Angle, SNR(Signal to Noise) until you get the clearest result.
Advanced Enhancement – c. Perspective Transformation
The tilted objects can be flattened with the Perspective Transformation feature. We’ll apply on this sample video, you may need this feature frequently on the car plate. After cropping the image, go click the Perspective Transformation menu. Select the four coordinates of the area where perspective transformation is performed and click the apply button.
Today, one of the most compelling types of evidence is video. As video evidence becomes more and more common, MD-VIDEO AI is an essential tool for organizations that handle huge volumes of video footage but have limited resources to accurately review the massive amount of data buried in it.
Here we introduce MD-VIDEO AI features that can perform many tasks for you, more accurately and efficiently. The current version of MD-VIDEO AI is highly focused on the detection of various types of objects and colors that are related to the crime scene, this object detection feature is accelerated with a multi-core GPU. And with those labels classified scenes, users can review the summarized results. Also, check out our How-to video on the MD-VIDEO AI and find out how you can be benefited!
How to Run AI Analysis
Check the video to be analyzed and click AI Analysis in the menu.
AI Analysis Settings
Before starting AI analysis, the user can set the options. Select file to be analyzed, preview the selected file and set the object detection type confidence threshold and the frame differential percentage. Also, the date range of each file can be selected by dragging or typing directly.
Display of AI Detected Object
Analysis result consists of File List, Gallery Filter, Event Gallery, and Frame View. Users can directly select the same object and group them and the label can be changed when the label is different from the user’s intention. And if the user is already aware of the color looking for, can set filter only frames that contain that specific color. Filter by selecting objects can be done directly in the Frame View by mouse drawing on the object.
Review on AI Analysis Results
Analysis results are organized into Scene List, Scene Gallery, and Detailed view. Users can remove unnecessary frames from the scene. And the image enhancement feature is supported for the image of frames included in the scene.
Scenes can be merged to create a new scene and unneeded scenes can be removed by pressing Remove. Users can create a movie that contains only scenes. Especially when the video to be analyzed has a long playback time, this function can generate a shortened video containing only meaningful objects.
To learn more about MD-VIDEO AI features, go check our Youtube channel!
The Number Plate Analysis is a feature that is machine-learned from low-quality of number (0 to 9) images and predicts the number when a low-quality image is added. An existing enhancement feature in MD-VIDEO also can help you to identify numbers from the low-quality images by applying various enhancement options such as Super Resolution and Motion Deblurring feature.
However, this smart feature can support you to get the data without any complicated steps, it’s much easier, time-saving and you’ll get the most reliable results!
How to Analyze Blurred License Plates
On the frame, drag the area you want to crop on the canvas then right-click in the [Number Plate] area. Click [Add new bounding box] to specify the area for each number then click Analyze.
You can also check why MD-VIDEO got the result via [Show Detail], it shows you the probabilities of each number analyzed by the number plate analysis model.
Review the Image Enhancement results
You can check the analyzed result from ‘Image Enhancement Results’, it shows Image, Probability, and Attribute.
Image is the number plate file you select to analyze.
Probability shows each number’s numerical probability determined by the number plate analysis model.
Attribute shows the name, source file path, location, resolution of the improved image, history and user can add comment.
To read the full article, please download the PDF.
Why forensic investigators must keep their eye on the Samsung Secure Folder? Like the word ‘Secure Folder’, Samsung Secure Folder is separated from the normal storage space and encrypted based on Samsung’s security technology ‘Knox’. PIN/pattern/password or biometric verification is required to access the secure folder. The data in the secure folder is not accessible from outside and is not visible even when the device is connected to the PC. This means, personal or confidential data can be stored in Samsung Secure Folder, and this can be the core data for your forensic investigation. Today we introduce how MD-NEXT can help you to approach Samsung Secure Folder with various methods by models, MD-NEXT will support Android version 11 soon, and you’ll get more meaningful data!
*’The ‘Knox’ space manages the entire space variably just like many apps manage data in their DB. And when data is deleted from the Knox, it is returned to the non-allocated area of the basic storage space, therefore, ‘Logical Extraction’ is carried out in file unit.
MD-NEXT Extraction methods by Models
Galaxy A5/S7/S8/S9/Note8/Note9 Series (Exynos & Qualcomm)
If the Android security patch level is before August 2019, you can obtain the security folder using the ADB Pro T4 method. The USERDATA partition is acquired as a physical image, and additionally, the files stored in the secure folder are decrypted and acquired as a separate logical image.
Galaxy A6/A7/S9/J6/Note9 Series (Exynos)
If the Android OS version is 10, you can obtain the secure folder using the Bootloader Pro method. Like the ADB Pro T4 method, the USERDATA partition is acquired as a physical image, and additionally, the files stored in the secure folder are decrypted and acquired as a separate logical image.
Galaxy A30/A40/A50/S10/Note10 Series + Galaxy Tab A 10.1 Series (Exynos)
Samsung Galaxy S10 and Note 10 series of devices and some A series of devices, you can obtain a secure folder by using the Full Filesystem (Bootloader Pro2) method (Supports both Android 9,10 and 11). When acquiring the active files of the USERDATA partition, the files stored in the secure folder are decrypted and acquired as a single logical image.
How to Review Data?
The data in the secure folder is acquired as a separate logical image from the physical image of the USERDATA partition. The file naming scheme for logical images has been changed in MD-NEXT version 1.89.5(Released date Jul.15, 2020), so the file name may differ depending on the version. Information on the file name and extension of the acquired images can be checked in the acquisition report.
‘MD-LIVE’ New features to Save your Onsite Investigation Time
Whenever to access the evidence phone at the crime scene, you may always suffer from insufficient time and its complicated steps to use the mobile forensic tool. The search on the apps to watch and the pinpoint of the keywords from the piles of text messages are getting crucial for the first responders. MD-LIVE has armed itself with two useful features to save the investigation time and to meet these needs for smartphone forensics.
‘Keyword’
The keywords that are frequently searched such as drug, sexual assault, murder cases can be grouped and registered by category. Users can select a category that matches the case, it can save much time from repetitive searching keyword routine and prevent missing important search terms. Moreover, user can continuously update the keyword list and share with their colleagues by Import/Export feature.
– How to register keywords?
Click the ‘Keyword’ icon in the upper right corner of MD-LIVE. Enter the keyword group name in ‘Name’ and list the search terms to be included in the ‘keyword’, separated by ‘;’, and click the ‘Add keyword’ button.
– How to search with keywords?
Select the target you want to search from the list of registered keywords and click the ‘Search by selected keyword’. Then MD-LIVE performs a multi-search on the targets registered in the keyword group.
‘Watch List’
If there are apps to be scanned every time or need to quickly scan a specific list of apps according to your institution’s needs, ‘Watch List’ is a preferentially considerable feature. This supports you to easily determine whether a specific app is installed in the device in advance. By selecting a forensic target at a time, it saves you a lot of time from searching multiple apps each time and selecting them as targets. And once app scanning is completed you can quickly determine whether an in-depth forensic investigation is needed on the specific target.
– How to use Watch List feature?
Connect the device and operate Watch List feature on the [Select Data] step. Target apps can be added by right-clicking on the desired app and the list of apps can be managed by ‘Manage Watch List’ at the top right of MD-LIVE. Select ‘Manage Watch List’ and add the package name of the app you want to specify.
An eye-shaped badge will be displayed next to the app, and you can easily review all the listed apps through the ‘Watch List’ filter and select them as an extraction target at once.
You may have some experience of having trouble acquiring data from unclear video evidence.
In this video, you can learn how to enhance video and image using MD-VIDEO.
Even the video you are investigating is blurry, shaky, dark, small, MD-VIDEO can improve and secure better visibility with various enhancement features.’
Part 1. Basic Enhancement
Part 2. Advanced Enhancement -Rotation/Super resolution/Motion Deblur/Perspective Transformation
Part 3. Review Enhancement Results
Learn more about MD-VIDEO, and get more forensically meaningful data!
If you need any support, feel free to contact our team.
iOS Full Filesystem(Checkm8) – Improved and supports iPhone 6 (iOS 12.X), version: iOS ~14.5. MTP extraction – Supports pop-up guidance to extract media files not accessible by ADB from Android 11. Major Apps selection – Improved to select major apps from supported apps list. FAQ – Added New Troubleshooting guide (FAQ) feature.
MD-RED v3.7.12 – v3.7.22
Filesystem – Supports mounting of the MTP image on the Android Live image extracted from the same Samsung device. DB Viewer – Supports Base64 string decoding and BLOB data interpretation that stored in SQLite DB. Report – Added ‘Information file(.pdf)’ while ‘Imaging analysis result files’ and ‘Verify Image’ menu.
MD-LIVE v3.3.20 – v3.4.0
Keyword – Added ‘Keyword’ feature for managing keywords set and multiple searches. Analysis result – Improved check-reaction performance of analysis results. HashSet – Added search button for new search even after analysis is completed.
MD-VIDEO v3.5.0 – v3.5.2
OCR – Support for timestamp and channel number in each video frame. Media enhancement – Various functions to zoom in and out of frame. New DVR model support – COMMAX/Swann/EGPIS/Q-SEE/S-1/Honeywell (HRHQ-1040L) – Hikvision FS/Zmodo(ZMD-DT-SIL4) – EXT2/IDIS
MD-CLOUD v1.5.0
Extraction – Supports Google calendar extraction by credentials which is extracted from MD-RED and multiple google accounts saved in credential. Data Viewer – Added a video viewer. Analysis – Improved data control performance of big amount of data and selection speed.
Check the major features of MD-Series released in 1Q 2020, if you would like to know more go download PDF file.
