Video investigators often receive files with little or no information surrounding the source, acquisition or handling. The files are often created by people with little knowledge of the legal requirements of data type and continuity. These issues, and quite a few others, all impact on the initial investigation as discrepancies can cause major problems further along in a case.
Let’s look at this file for example…
All images with sensitive data have been redacted.
Upon viewing in Windows, the thumbnail and extension are shown, and hovering over the thumbnail reveals further information.
I am being told that it’s a Windows Media Video, it’s just under 4Gb and has a length of just under 27hrs.
The CCTV request for footage did detail a time duration of 27hrs so it all looks good so far.
As the title of this blog post is, “Where Is the Rest of the Video?”, you just know that things are going to go wrong!Continue reading