One tool to fix everything?

When I first began working cases, there weren't many vendors offering gear and services in this space. There wasn't really a market, per se. Most of us used COTS tools like Photoshop, Premiere Pro, Media Composer, etc. Then, the purpose-built tools arrived and analysts' hopes were raised - will there be one tool that fixes everything and fills every need? So many years later, the answer is still no.

For example, if you like Input-Ace for processing proprietary files, you'll likely have an extra capture tool, Photoshop for optical correction (with various plug-ins), Acrobat for reporting, and so forth. Input-Ace has some capabilities for creating demonstratives, but not on the scale of PremierePro or Media Composer - so you'll likely have one or both of those tools as well. For audio, your preference of Audacity / Audition / Sound Forge / etc. will likely depend on when you started working with audio and what plug-in suites you own. But, you'll need an audio tools as Input-Ace isn't a tool for audio forensics ... which is fine. Remember, Sound Forge isn't a tool for converting proprietary video files.

Likewise for Amped's customers. Sure, FIVE is a feature packed tool. But, like Input-Ace, it lacks full support for audio, creating robust demonstratives, etc. So, you'll need the Adobe Creative Suite or the full package from Magix (Vegas, Sound Forge, and Spectral Layers).

Why is this so?

Outside of federal / national service, it's rare to find an agency with dedicated analysts and a dedicated trial support crew. Most analysts are also asked to create demonstratives for the investigation, the media, and the court. Sometimes, trial support employees are asked to perform analysis. Often multimedia analysts are tasked with computer forensics, mobile device forensics, and the entire "digital crime scene." In a few cases, the employee is responsible for the entire crime scene - latent prints, serology, photography... + the digital stuff (CCTV, computers, phones, etc.). Usually, the smaller the agency / company, the more the individual employee is tasked to do.

Thus, there will likely never be one tool to fix everything. You may think we're close. We're not. Encase is a nice tool for computer forensics, but it doesn't really handle a computer that happens to be a DVR. For that, you'll need a tool like DVR Examiner. But even DVR Examiner has limits, some of which are addressed by Salvation Data's Video Investigator Portable (VIP). SalvationData has tools for computer and mobile device forensics as well, DME Forensics does not. It's not a bad thing. It just is.

In future posts, I'll explore some essential workflows that show this blend of tools. I'll illustrate the various points that may complicate your validation and offer tips to solve this tricky problem. In each case, we'll follow the standards and show how to populate a standards-compliant report. I'll be building out my ScreenCast portal with some of these simple video tutorials. For full fledged training to competency,  there are the options of micro-learning, in-person (in Henderson, NV), and in-person (at your location).

Whilst some may bemoan this lack of a singularity, I don't. I love the wondrous variety that has appeared in the marketplace. I welcome the challenge of showing / training / educating you about this complex topic. I'm already rolling out new training offerings, with more to come. Jump over to the training page for the up-to-date training calendar. Or, sign-up for my new newsletter.

The future of forensic multimedia analysis is wide open. I'm excited to be a part of it, and to be your guide. Join me in the fun.