Video Evidence Recovery and Analysis (VERA) Course

Image: Cellebrite Drone Analysis Course Shield

Level - Intermediate

Course Length: 5 Days

The Video Evidence Recovery and Analysis Course (VERA) is five-day intermediate level course designed to introduce investigators, examiners and analysts to digital video technology and to meet the specific needs of the digital video examiner and analyst.

Students will learn proper methods to interrogate digital video evidence while receiving guided instruction throughout the process of recovering valuable evidence from video images. The course will also focus on specialized investigative techniques for the examination of video to explore issues relating to the use of force, speed estimation and identification. A variety of DVR, body-worn and in-car video sources will be examined in depth, testing data acquisition, file identification, image accuracy, video processing work flows and report writing.

The course will provide students with an understanding of best practices and methodologies for extracting and examining digital media evidence while providing students with focused, practical use of DVR Examiner and iNPUT-ACE. Upon successful completion of the course, students will be offered an opportunity to take an industry-recognized certification examination, created in partnership with DME Forensics and iNPUT-ACE.
Course objectives

Upon successful completion of this course, the student will be able to:

• Understand video standards, frame rates and aspect ratios.

• Recognize compression, codecs, file formats and containers

• Understand Digital Video Recording devices and technology

• Demonstrate Best practices and methods of video extraction

• Accurately document video extractions 

• Cellebrite's core training and certification process.

• Cellebrite's accolades and accomplishments.

• Recognizing the current tools and solutions used in digital investigations.

• The legal responsibilities of investigators conducting digital investigations.

Basic Technical Overview

• Digital Video Terminology

• Digital Video Definitions

• Digital Video Technology

Traditional DVR Acquisition and Recovery

• Traditional acquisition methods

• USB Export

• DVR Interface

• Cloning

• Analog output

• Screen Recording

Traditional Playback and Processing of Digital Video Evidence

• Proprietary players

• Screen Captures

• Transcoding vs. Rewrapping

• Codecs

Simplified Acquisition of Digital Video Evidence

• DVR Examiner Hands-On Overview

• Basic Walkthrough of the DVR Examiner User Interface

• Demonstration of the “easy and better way” to acquire digital video evidence

Simplified Processing of Digital Video Evidence

• iNPUT-ACE Hands-On Overview

• Basic Walkthrough of the iNPUT-ACE User Interface

• Demonstration of the “easy and better way” to process and analyze digital video evidence

Legal and Evidentiary Considerations

• Best Practices

• Federal Rules of Evidence, Chain of Custody and Evidence Integrity

• Consent, Warrants and Seizure

• Demonstrate the hands-on use of DVE Examiner and iNPUT-ACE

Acquisition Best Practices

• Bag and Tag

• Date/Time Offsets and Logging Serial Numbers

• Contacting Owner for Information

• Use of Write-Blockers

• Imaging and Hands-on Hashing

• DVR Disassembly

DVR Examiner Overview

• DVR Examiner in Depth

• DVR File Structures

• Date/Time Filtering

• Inaccessible Data

• Extracting Video Clips and Saving Projects

Building Projects with iNPUT-ACE

• Focused hands-on instruction on the use of iNPUT-ACE to build projects.

• Organizing File List / Projects

• Marking / Grouping Images

• Saving / Reloading Projects

Technical Considerations Processing Digital Video

• Infrared Considerations

• Interlacing

• Aspect Ratio

• Refresh Rates

• Frame Hashing / Rewrapping

Video Compression Overview

• Spatial Compression

• Temporal Compression

• Macroblock Analysis

• Video

Building Narrative Reports with iNPUT-ACE

• Building a Narrative Report

• Creating Demonstrative Exhibits

• Sub-Clip Concatenation

• Working with a Case

• Reporting

Hands-On Practical Acquisition

• Students are provided with a scenario.

• Students use practical skills learned to acquire digital video from several digital video sources.

Hands-On Practical Processing and Reporting

• Students will build upon digital video acquired during the acquisition hands-on practical exercise

• Students will apply techniques learned and process the mock-scene video.

• Students will prepare a report on their findings.

Last modified: Wednesday, August 7, 2019, 1:18 PM