Add Screenshots to Forensic Image Reports in Amped Authenticate

Table of Contents

Reading time: 4 min

Dear Amped blog readers, welcome to this week’s tip! Today, we’re dedicating some room to a simple yet very effective trick. The goal is to make your forensic image analysis reports in Amped Authenticate more comprehensive and clear. We’ll see how we can effectively add screenshots to our project and comment on them. In such a way that they appear in the report, helping to build up the story. Keep reading to find out more.

“Reporting is important”. How many times have you heard this mantra when reading best practice manuals or when attending training, including our own? And it’s true, indeed: even the most brilliant and clever analysis will likely fall short in reaching the audience if it’s not reported clearly and convincingly.

When you work on image authentication, this is even more true than usual. Sometimes, you’re asked to “reverse engineer” the digital history of an image. Amped Authenticate tools provide you with data and statistics. But then it’s up to you to build up a “plausible story”, one that explains what happened with the image in your hands. Not surprisingly, this kind of analysis requires a bit of intuition, background information, and subjective evaluations. And all of these need to be properly reported.

Why Visual Evidence Matters in Forensic Reporting

Since the latest update, Amped Authenticate features the Projects functionality. It allows the user to bookmark relevant findings, possibly organize bookmarks into folders, and finally generate a report of the analysis. Quite often, when working on an image, we may need to compare it with reference material, gather background information on the web, etc. As long as you need to compare the pixels or metadata of your evidence file with those of a reference image, you can simply do it by loading both images in Authenticate’s GUI. Every time you add a bookmark, both the currently loaded evidence and reference images are bookmarked. You’ll see the comparison in the report as well.

Screenshot of Amped Authenticate software comparing EXIF metadata of two JPEG images for digital forensic analysis. The left panel shows metadata analysis tools and filters such as EXIF, JPEG structure, and PRNU identification. The central window highlights EXIF metadata fields like Make, Model, Orientation, ISO, and Exposure, displaying comparison results between an evidence image and a reference image. A pop-up notes that the metadata are consistent. Red arrows point to the file paths and camera information, emphasizing the provenance of the images used for authenticity verification.

But what if you’ve used, say, the Show image location on Google Maps tool? And you want to add to your report the obtained map?

Google Maps screenshot showing the geographic coordinates 45°39'25.9"N 13°49'47.6"E (45.657200, 13.829900), located in the Area di Ricerca Science Park near Padriciano, Trieste, Italy. The map highlights nearby locations including Trebiciano, Gropada, and Basovizza. The left panel displays a street view image of a road lined with trees and fencing, alongside options for directions, saving, sharing, and adding labels. The right panel shows the location pinpointed on the map with nearby roads SP1, SS14, and SS202 clearly visible.

Of course, you can generate your report in the DOCX format and add it manually later. The problem with this approach is that, in case you need to regenerate the report, you’ll have to manually add the map again. Is there a better way to go? Yes, and it has always been under your nose!

Adding Screenshots to Your Amped Authenticate Project

Authenticate’s projects do not force you to work on a single evidence image. You can load one image and add a few bookmarks. Then, load another evidence image and keep adding bookmarks to the same project. Each bookmark is indeed linked to the image you are working on at the time you add it, as we’ve seen above. So, once you’ve found your map on the web, take a good screenshot of it, save it somewhere in your project’s working directory, and drag it into Authenticate. Then, choose the Visual Inspection filter and add a bookmark. You may call it “Location on Google Map”.

Screenshot of the Amped Authenticate software interface displaying metadata analysis of an image titled "google maps loc.png." The image under analysis shows a Google Maps view with GPS coordinates 45°39'25.9"N 13°49'47.6"E, placing the location near Area di Ricerca in Padriciano, Trieste, Italy. The left panel of the software lists various forensic analysis filters such as Visual Inspection, JPEG Structure, and PRNU Identification. The right side shows a detailed map and Street View image, with the exact location marked and contextual tools available for metadata and geographic verification.

When you generate the report, this screenshot will be treated as one of the images that are part of your project. It will appear in the report along with the associated bookmarks comments.

Since these “additional” images normally do not require any processing to be documented, you can hide the Visual Inspection filter parameters in the report, just to make it lighter. To do so, just double click on the bookmark’s name and select “All” from the Hide parameters in the Report menu, as shown below.

Screenshot of the "Bookmark" window in Amped Authenticate software, displaying metadata related to an image titled "google maps loc.png". The bookmark is named "Location on Google Maps" under the "Visual Inspection" filter. The description field states the map shows the location derived from the image’s GPS metadata. The "Hide parameters in report" dropdown menu is expanded, showing options: None, All, Post Processing, and Input. This interface is used to annotate and customize forensic reports for image authentication.

And that’s it! This is how your map will look like in the report:

Screenshot of a forensic analysis report section titled "3.1 Location on Google Maps" under "Background information" section. The report includes a comment noting that the map shows the location obtained from the image's GPS metadata. It lists input file details including the filename "google maps loc.png" and its MD5 hash. The filter information specifies "Visual Inspection" with a reference to the textbook Handbook of Image and Video Processing by A.C. Bovik. At the bottom, a Google Maps screenshot displays GPS coordinates 45°39'25.9"N 13°49'47.6"E, pinpointing a location near Padriciano, Italy.

Using the very same approach, you can add any kind of screenshot to your report. If you’re an Amped Authenticate user already, you have the effective example “06 – siena” ready in your Samples folder (normally installed in “Documents\Amped Authenticate\samples“). There, we show that you can even compare your evidence image with a screenshot to obtain a very effective result.

Screenshot of the Amped Authenticate software comparing two images side by side for forensic analysis. The evidence image on the left shows a photograph of Siena, Italy, while the reference image on the right displays a 3D Google Maps view of Siena's Piazza del Campo with the Torre del Mangia. The interface includes file format analysis tools, JPEG analysis, and contextualization options in the sidebar, highlighting compatibility between the potentially manipulated image and the verified location.

Conclusion

Including relevant screenshots can dramatically improve the clarity and credibility of your forensic image analysis reports. Amped Authenticate’s flexible project tools allow you to add maps, documents or comparison screenshots. Also, it allows you to annotate them with ease.

Table of Contents

Share on

Subscribe to our Blog

Subscribe to Blog via Email

Enter your email address to subscribe to this blog and receive notifications of new posts by email.

Subscribe to our Blog

Related posts