«HEX–Expert»

News


February 28, 2017

“OT-Contact” participated in international scientific-practical conference “Special forensic technology” with a report on “Special software applications for forensic video and audio analysis”. “OT-Contact” represented new capabilities and functionality of "ÎÒExpert", "HEX-Expert", "DB-Expert" and "DTP-Expert".
>>

November 02, 2016

OT-Contact” provided a presentation of new functionality of software application complex “DTP-Expert” for government forensic experts.
>>

September 29, 2015

«DTP-Expert» received approval from Ministry of Justice Scientific Council for usage in forensic video examination laboratories.
>>

Media file structure forensic investigation system «HEX–Expert»


Software register certificate #2015616164 02 June 2015.

HEX-Expert. Specialized software application dedicated to authentication of audio, video and image files.

HEX-Expert is applied to tasks of forensic audio and video experts and digital forensic examination.

FAT-Expert module extends HEXExpert functionality and allows creating and analyzing of FAT16/FAT32 file systems images

HEX-Expert module provides detailed analysis of file structure and its match to declared file format. Digital data is represented in hexadecimal format and can be interpreted in a variety of types for authentication purposes. The system automatically detects traces of codecs or audio/video software application. Frame allocation map allows inspecting frames sequence periodicity and establishes individual features of recording device/software application.

HEX-Expert functionality:

  • recognition and display of file structures and streams in the following formats:
    • Resource Interchange File Format (RIFF) wav and avi-files;
    • Advanced Systems Format (ASF) wma and wmv-files;
    • MPEG4/QuickTime File Format (QTFF) mov, mp4, m4a, m4v and 3gp-files;
    • MPEG1/2/2.5 Layer 3 (mp3) mp3-files;
    • Adaptive Multi Rate (AMR) amr-files;
    • MPEG-PS (Program Stream) mpg, mpeg è vob-files;
    • MPEG-TS (Transport Stream) mts, m2ts-files;
    • Audio streams of MPEG1/2/2.5 Layer 2/3;
    • Audio streams of DolbyDigital (AC-3);
    • Audio streams of Advance Audio Codec (AAC);
    • Video streams of h264 / Advance Video Codec (AVC);
    • Video streams of MPEG4;
    • Image file JPEG.
  • graphic representation (with different detailization degree) of audio and video frames allocation inside the file;
  • byte comparison of two and more files;
  • detection and representation of playback parameters of audio and video blocks;
  • detection of errors in file structure;
  • comparison of structure of two or more files.

FAT-Expert module is dedicated to analysis of data storages (FAT16/FAT32 file systems). FATExpert reveals individual device features and depicts file sectors allocation in the device memory and approves that the file was created by device itself or was copied to it after manipulations.

FATExpert functionality:

  • analysis of FAT of digital media devices storage;
  • creation and analysis of uncompressed images of FAT16 or FAT32 digital media storages;
  • Media information blocks allocation mapping in graphic and table mode;
  • display of creation, modification and other date/time in tabular form;
  • directory entries of digital media graphic or table representation;
  • deleted files and directories extraction;
  • block allocation order sequence analysis;
  • files’ time attributes and their sequence correctness analysis.

HEX-Expert can be both: a module to OTExpert and a standalone application. FAT-Expert module is an add-on to HEX-Expert.