Free DME & DFIR Resources

There is more Digital & Multimedia Evidence (DME) than any other type of evidence today.
Working together we've expedited tens of thousands of criminal investigations. Learn more

I've posted a new tutorial on Submitting & Managing Articles and Newsflashes, which registered members will find on the Tutorials page under the Help menu after they sign-in.  Additional tutorials are always being developed, so be sure to check back soon for more.  As always, if you have any suggestions or comments please feel free to post them to the member forums, shoot me a PM, or send them to me via our Contact Form.  Have a great weekend everybody!

Photoshop has grown into a very powerful and capable platform for working with video since the capability was introduced in CS3 Extended. I’ve dabbled with it over the years, but despite its impressive capabilities I always end up going with what I know best, relying on other video editing tools for most video related tasks. Well, this old dog is always trying to learn new tricks that improve efficiencies in my various personal and professional workflows, so I’ve been making an effort to explore Photoshop’s video capabilities more often.

A DVR comes in to the lab and there’s not a single label on it. No identifying marks, labels, nada. The owner has no clue where it came from, nor any manuals or documentation. Sweet.

Well, in the past, one of the tricks of the trade was to take a photo (or two) and drop it in to Google image search. With any luck you stumble upon one that looks just like it. Success! Not so fast zippy, it’s rarely that easy, but I thought the following was worth pointing out.

Bing has now joined the image search game too, so the next time you’re in a similar pickle, be sure to give them both a shot at it. Good luck!

Encryption is all the rage, again. Politicians and government officials apparently have no problem with using fear mongering to conjure up support for backdoors to encrypted devices and data. Privacy advocates keep doing the same, basically, warning that providing big brother with backdoor access to encrypted data is like leaving the cookie jar in your wide-open kitchen window, on Sesame Street.

(The original post included a link to my complete post on this topic on LinkedIn, but those articles no longer exist.)

One of our members notified me yesterday that a file which had been uploaded to our site contained a signature associated with a known Trojan.  As soon as possible, I verified using multiple tools and removed the file from our server (H264Player.zip).  Always scan ALL downloads and attachments for malicious code, regardless of perceived source.

1. What is File History
File History is a new backup service introduced in Windows 8. By default this feature is off and to turn it on, user has to select a backup location – either a network drive or external storage media. Thus, it does not allow user to use the same disk. File History backs up files of the Libraries, Desktop, Contacts and Favorites folders. There is an option to exclude any folder(s) that users don’t want to backup. Notice that File History is unable to backup your folders synced with cloud storage service(s). According to Microsoft, “File History doesn’t back up files on your PC that you have synced with SkyDrive, even if they’re in folders that File History backs up.” Once turned on, File History automatically backs up the folders after every hour by default; however this interval can be changed easily in advanced settings. In addition, at any time, user can manually run the service. File History appears as fhsvc in the Task Manager and some associated dlls are fhcfg.dll, fhcpl.dll and fhsvcctl.dll.

Full Story

That's a tall order, right?  VLC from VideoLAN.org has become the go-to media player for most, as it can play so many things that Windows Media Player won't, and it's free.  Well, how does it do that, play more than other players?  The Libavformat and Libavcodec libraries, the same ones created by and for the FFmpeg project (and so many other multimedia applications)

VLC & DirectShow Filters

DirectShow is one of Microsoft's multimedia frameworks, formerly known as ActiveMovie, which replaced Microsoft's earlier Video for Windows framework.  VLC supports DirectShow-based input sources through a module (not very well, IMO, though), but the default Windows version downloaded from VideoLAN cannot reference 32-bit DirectShow filters installed on your Windows PC for audio/video decoding (i.e. filters/codecs registered in your Windows Registry), as the default version downloaded is x64.

As an example, a DCCTV video file exported from a GeoVision system to an AVI file may be using the proprietary GMP4 video codec. In order to play the video, you must install the GeoVision GMP4 codec necessary to decode the primary video stream; this is a DirectShow filter.  DirectShow filters can only be referenced by applications that can leverage DirectShow, which we've established, VLC x64 cannot. 

Free broadband Internet connectivity is definitely a good thing, but at the cost of others, not so much. Even though the issue of "stealing" bandwidth from unsecure Wi-Fi networks is still a grey area legally in most places, here are a few helpful tips on how help make sure your home wireless network isn't being used by the neighbors:

Member Log-In

Remember Me

Membership is not available to the general public. Please use your government email address to register. See About Membership for details.

Smart Search

DME Resources Newsletter

Sign-up for the DME Resources"I may occasionally send an email" newsletter. Maybe quarterly? Semi-annually?

Well, what I can tell you is that your information will not be shared. See my Privacy Policy.

NOTE: Members of my site are NOT auto-subscribed or un-subscribed from this newsletter; they must manually Opt-In/Out.

Subscribe Today!

Who Doesn't Love Cookies?
DME Resources may place one or more Cookies on your computer. Cookies do not contain any personally identifying information, they allow me to customize my site based on your preferences. If you Decline cookies from my site, you may not be able to use all of the site's features.