UK Video Forensics Insights

Author: Carlton Purvis, Published on Jan 23, 2014

David Spreadborough has been a police officer in the UK for 23 years, a forensic video investigator for 10. In an interview, he shared with us some insights of forensic video investigation from across the pond.

In this interview we discuss:

  • *** ******* **** *****
  • ******* *****
  • *** *** **** **** **'* **** ******

Biggest ******* **** ********** *****

***** ** ******* ** ***** ** ************** ***** **** ******* cameras. *** ******* ******** ** ****************** **** ********** ***** ***** * ***** ** *** ********* in **** **** ********* ****** *** *****.**** ** *** ************* ** ************* ** *** ****** ******.

“** *** ******* ***** ******** ********* ******, ***** ** ******** 10 ***** **** ****** ** ******* ***** ********* *******. ****** to **** ** **** *** *** ******** **** **** ****** hold ***** ** ****,” ** ****.

*** ****, **’* **** ******* ******** * ******, ********, ********* engineering ******* ***** ********* ** **** *** ******* *** **** record, ** ***** ** ******* *****. *** *** ****, * homicide, *** ******* **** *** *****.

** **** ***’* ****** *** *** ** ******* ***** **** at *** ***, ** ***** ************** * *** ****** *** a *** **** ***********.

“** *** *** ** **** ** **** *** *** *** designed * ******* ****** ** *** ******** *** **** ** may **** ***** ** ** ******* *******, ** ** *** a ****** ** **** ******* ** ****** -- **’* **** to ** ** ** *** ******* *** **** ***,” ** said.

**** ***** **** *** *** **** ******, ** ****, ** if *** ************* ******** **** **** *** *** *********** ** see *** ******* ** ******* *****.

“******** ** **** ****** * *** ******, **’** ****** ** analysis ******** *** ** *** ***** ** *****. ********* ***’* put **** *********** [*** ** ******* *****] *** ***** *** they ******. * *** ************ ****** ****** **** * *** enforcement ****** ** ***** *******. **** ***** ** * ****** answer ** * ******* *******,” ** ****.

**** ***** **** *** *************, ** ****, ** ** *** ************* **** ***** ** standardized *******.

Old ******* ****** ********

*** ******* ** ** *********, ************* ****, *******, ** *** early ****, **** ********* *** *** **** ****** *************. “** ***** come ****** ***** *********. **** *** **** ** ** ***** old *** **** ***** ******** ** **** ** ****** *** data. *******, * *** ** ********* *** ******* *** **** that **** **** ** ** **** ** *** *** ******** to *** ***********,” ** ****.

Forensic ************* *** **** ** ******* ***** ** ***** *****

“******* ** * *** ** ********* **** ** ****. ******* it’s **** *** ***** **** *** **** *********. ** *** recover *** ***** ****, *** ** **** ***’* ******* *** index. ** **’* **** ** **** ***** ** ******* **** 16 ******* *** ** **** **** **’** ******* ** ******* the ***** ** ****,” ** ****. ** **** ***** **** empty ****** **** *** ******* ********* *** ******* ** **** a **** ****.

Video **** ********** ******* *****But even without the video available, there are still times where ********* ***** **** ** *********** **** ** **********.

** **** ** *** ********* ***** ***** **** ***** ** admissible ******* *** ****** *****: * ***** *** **** * person ** ** ****** ** * ********** ***** ** **** have ******* *** ***** ******** ** ***** *** * ****.

“******* **** **** ******* ** *** ***** **** **** *** jury ***, *** ***** ***** ***** **** ** *** ***** as ** ****** *******. ** ***** *** *** **** **** playing *** ***** **** *** **** ** *****,” ** ****.

******* ******** ** ** ** ******* *** ***** ******** ***** of * ***** ****** *** ******* ** ****, **** *** notes *** ********** ** ** ******** ******.

Who ****** ****** *****?

* ***** *** ** ** *** ********* *** *** ***** to ****** ***** ** ** *** ****** ********* ** ** it **********.

*** ***** ***** ******, ** **** ** *** ****** ********* knows **** ****’** ***** *** ******* *********, ***** *** ******* no ******. *** ****** ***** *********, ************* **** ******* *** the ***** ********* **** ** ******* ** ******* **** ****** pull ** ** ** *** *** **** ******.

“*** **** ******* ****, **’** ******** ** **** * ** an ******** ** *** **** *** ******* *** ******* ********,” he ****. **** ******** ******** *********** *** ********** *** *** was ** **** ** *** ****** *** *** ******** ******.

**** ********** ********** ***** *** *** ********* **** ***** ** the ***** *****, ****-****** ******** *** *****. **** **** **** the *********** ** *** ****.

“*** ** *** ***** ****** * ** [** * **** analysis] ** *** *** *** ** **. ****’* *** * gauge ******* *’* ***** ** ***** ** **** *** **** it **** **. *** ****** * ***** **, *** **** likely **’* ***** ** ***** ** *****.”

Power ** ***** *********

************* **** **** ** ******** ** *** *.*., ** *** UK, * ******* ***’* ******** ** ****** * ***** ************ system ** ****** ******* ** ******** ******** ** * ***** under ********* *** ******** ******** ***, *** ** ** *****, **’* ***** *** ** *** that *****. *** ***** *** ****** ******* ** ******* ***** or ****. *** *** **** **** ****’* *** ** *********.

“** **** ******* *** **** **** ** *** ** *********** when ** ***** ********* ** *** ******** ****’* **** ******* surveillance. ** **’** ******* ***** **** *** * **** ****** of ****, **’** *** **** * *** ***. ** **** buy ***** *** ** *** * ****. **** ** *** time ** *** *** ** **** ** ****,” ** ****. “Usually **** * ******* *** ****** ** **** *** **** we’ll ** ******* ** * *** *** **** *** ****.”

Cloud ******* * ****

********* *** **** ** ***** ********* *** ***-**** *******, *** ************* **** **** ***** ****** **** complicated *** ********* *************. **'* ****** *** ************* ** **** take *** *** *** **** ******** ****** ** *** ****.

Comments (6)

A curiosity for me. If Law enforcement can seize recorders to analyze the video, what if the recorder is running on a virtual system and seizing the actual hardware may also mean loss to the company for other services run on the same hardware but different virtual machines.

Are image backups acceptable to law enforcement? That is to say, we prefer not to give you the whole computer due to its function but we can do an image for you.

We're talking about the UK. They use tube cameras and 8 tracks to record video there....

John wasn't too far off but we are getting there! The difference here is that we have had surveillance video for quite some time and rather than a lot of new IP HD networks, the majority are old analogue setups with a DVR replacing the VHS deck and multiplexer.

If I can't pull the DVR because the data is on a linked server, or similar, then we may have to use external storage and then conduct a number of validation tests to confirm that the copied data is intact.

In large exports, we conduct a staged download, with the most important first and work from there.

A recent problematic system was a tower PC where the entire stores tills, ordering and surveillance was on the PC. Luckily all data was stored on a seperate internal drive, but getting it meant turning off the entire store. copying over 2TB of data would have taken ages but a quick swap out took the time to drink a cup of coffee.

If image backups are done then some sort of copy verification should be completed to prove they are a bit for bit copy.

Very interesting article. thanks.

I would love to hear David's opinion as for how does he view the problem of searching the video content itself. I assume than searching hours of video in a manual manner can be a pain. Does he use any method for having his searches done more effectivly?

Ariel

Hi Ariel,

You are right - it's a complete pain in the .....

The logging and searching of video data could be split into three seperate incidents.

  1. Realtime using operator input or automated analytics
  2. Post event using the original system either on-site or remotely
  3. After export, back in the Police Dept. or Video Lab

If an integrated system has the ability to log events in realtime such as movements, direction of travel, vehicle colours etc then this is great but, this has to be exported with the video data, and the ability to use the analytical data has to be possible away from the scene/system.

A lot of Systems / DVR's have analytical services included but its sometimes not possible to operate it and use the system on-site.

In the last point you have two common types.

The first is that the footage has to be reviewed to search for an event linked to an incident. That could be a person running from a scene or a vehicle driving past.

The period of time to search and the actual event captured is also commonly not known. It is always a manual task to identify the search parameters and then review that camera, logging events of note until that viewer hits the jackpot.

The most difficult ones are when there are unclear directions of travel and perhaps a large timescale. When that viewer finds the target vehicle / person captured by a stores front door camera at 0400hrs - it can be a real breakthrough and that one image can dictate the entire direction of an investigation.

The second is when there are many events. A common one is thefts by an employee etc. These can be very time consuming and are used to show a pattern of intent.

Other times are when someones actions and behavior changes. A person enters a store every morning at 0900hrs. Then after an incident, they dont show up. It all builds the picture but finding it all takes time.

Effective searching comes down to intelligence led parameters. These parameters are then changeable as further intel / evidence comes to light. Its common knowledge that in the first few hours after the London Bombings, the location parameters were the entire UK!

So, at the start of an investigation we may grab as much as possible but as certain incidnets are discovered, decisions are made that negate further work.

After saying all that though I have been involved in many cases, where weeks worth of footage has been painstakingly viewed but the 3 frames of video found have made it all worthwhile.

There are a few tools now available to ingest video, set certain parameters and then have a large amount automated. For specific sites and footage these are useful but for the majority they can be more of a hindrence. As the technology improves and those functions are built in to systems the situation will improve.

Hope that helps a little?

Hi David

Thanks for the comprehensive and insightful answer.

For your information, I am working for a technology company that develops some analytic tools to search specific events from recorded video. Obviously such tool cannot solve a crime immediatly, and still requires the decision making process of the investigator. However, we do believe that we can remendously help a video investigator in his search task.

I'd appreciate if you could contact me directly at af@agentvi.com so we can discuss this further.

Best regards

Ariel

Login to read this IPVM report.
Why do I need to log in?
IPVM conducts unique testing and research funded by member's payments enabling us to offer the most independent, accurate and in-depth information.

Related Reports

Installation Hardware for Video Surveillance - Indoor Fasteners on Jun 22, 2018
As part of our Installation for Video Surveillance series, in this note, we cover drywall anchors. A key part of installing security hardware is...
Axis Guardian - Cloud VMS And Alarm Monitoring - Released on Jun 19, 2018
Axis has struggled to deliver a cloud-based managed service video platform. Video service providers have utilized AVHS for over a decade, and have...
Axis Releases First New Access Controller In 5 Years (A1601) on Jun 15, 2018
It has been 5 years since Axis 2013 entry in the physical access control market, with the A1001 (IPVM test). Now, Axis has released its second...
China Public Video Surveillance Guide: From Skynet to Sharp Eyes on Jun 14, 2018
China is expanding its video surveillance network to achieve “100%” nationwide coverage by 2020, including facial recognition capabilities and a...
Powerline Networking For Video Surveillance Advocated By Comtrend on Jun 08, 2018
Powerline networking, using existing electrical wiring, has been around for many years. Indeed, over the years, some video surveillance providers...
H.265 / HEVC Codec Tutorial on Jun 07, 2018
H.265 support has improved significantly in 2018, with H.265 camera/VMS compatibility increased compared to only a year ago, and more manufacturers...
Princeton Identity Access 200 Iris Scanners Examined on Jun 05, 2018
Iris recently registered a big jump as a preferred biometric in our Favorite Biometrics survey, but access-ready options can be difficult to...
French National Police Buy 10,400 Hikvision Body Cameras on May 31, 2018
France’s national police forces bought 10,400 Hikvision body cameras earlier this year, in a high-profile deal that’s coming into effect as the...
Software Only VMS vs NVR Appliances on May 23, 2018
Should you buy your own PC/server and load VMS software on it or get a turnkey appliance (both hardware and software, e.g., NVR, Hybrid DVR) from a...
Installing Box Cameras Indoors Tutorial on May 22, 2018
This tutorial starts our physical installation for video surveillance series, starting with Box Cameras, one of the oldest and most basic types....

Most Recent Industry Reports

Installation Hardware for Video Surveillance - Indoor Fasteners on Jun 22, 2018
As part of our Installation for Video Surveillance series, in this note, we cover drywall anchors. A key part of installing security hardware is...
Hikvision ColorVu Integrated Visible Light Cameras Examined on Jun 22, 2018
When it comes to low light, infrared light has become the defacto standard in surveillance. But IR is limited to monochrome images, making colors...
Last Chance - Save $50 - July 2018 IP Networking Course on Jun 21, 2018
Today, Thursday the 21st is the last chance to save $50 on registration. Register now and save. This is the only networking course designed...
'Secure Channel' OSDP Access Control Examined on Jun 21, 2018
Despite claiming to be better than Wiegand, OSDP's initial releases did not address the lack of encryption between reader and controller, leaving...
Most Wanted Improvements In Manufacturer Technical Support (Statistics) on Jun 21, 2018
5 key areas of improvement and 1 clear wanted support feature were voiced by 140+ integrator responses to: What improvement in manufacturer...
GDPR / ICO Complaint Filed Against IFSEC Show Facial Recognition on Jun 20, 2018
IPVM has filed a complaint against IFSEC’s parent company UBM based on our concern that the conference violates core GDPR principles on...
IFSEC 2018 Final Show Report on Jun 20, 2018
IPVM attended the IFSEC show for the first time this year. The Chinese have taken over the UK, centered on Hikvision, flanked by Dahua, Huawei and...
Mobotix Releases 'Move' Into 21st Century on Jun 20, 2018
For years, Mobotix stood resolutely against, well, every other manufacturer, selling it as a virtue: MOBOTIX equipment is designed with no...
Cybersecurity Startup VDOO Disclosing 10 Manufacturer Vulnerabilities Starting With Axis And Foscam on Jun 20, 2018
Cybersecurity startup VDOO has uncovered significant vulnerabilities in Axis cameras along with many others not yet disclosed. In this report, we...
Axis Guardian - Cloud VMS And Alarm Monitoring - Released on Jun 19, 2018
Axis has struggled to deliver a cloud-based managed service video platform. Video service providers have utilized AVHS for over a decade, and have...

The world's leading video surveillance information source, IPVM provides the best reporting, testing and training for 10,000+ members globally. Dedicated to independent and objective information, we uniquely refuse any and all advertisements, sponsorship and consulting from manufacturers.

About | FAQ | Contact