DV150 Media Authentication and Analysis with Magnet Verify

This two-day instructor-led course provides students with the knowledge and skills necessary to perform structural comparative analysis on digital image and video files and to articulate expert results in both a report and court of law. Students will learn how to manually decode multimedia files at the binary level, performing authentication examinations using file metadata and structure. We will be working within Magnet Verify.

Description

This two-day instructor-led course provides students with the knowledge and skills necessary to perform structural comparative analysis on digital image and video files and to articulate expert results in both a report and court of law. Students will learn how to manually decode multimedia files at the binary level, performing authentication examinations using file metadata and structure. We will be working within Magnet Verify.

 

Course modules

Module 1: Course introduction & Magnet Verify installation
In this introductory module, students will be presented with the learning objectives, goals, and all related course materials for the 2-day training event. The module will conclude with a hands-on exercise during which students will install the desktop application of Magnet Verify, as well as learn how to download the desktop client and create a ZIP file for submission to the online Verify platform.

Module 2: Dashboard overview, project creation, & file submission
This module of instruction will focus on the many features available within the Magnet Verify platform. The students will be given a walkthrough of the dashboard, account and user settings, support functionality, user guide, and additional resources. Students will be shown how to create a Verify project and load files for analysis. Following, students will create all of the projects which will be utilized throughout the course through a hands-on exercise. The project and file homepages will be briefly discussed.

Module 3: Bits, bytes, & encoders
In this module students will explore the building blocks of data encoding. This will include an introduction into bits and bytes, data conversion from binary to decimal to hexadecimal, and an overview of representation information as it relates to the encoding process.This module will conclude with a hands-on exercise during which students will encode and decode raw data utilizing an ASCII table and rapid tables.

Module 4: Magnet Verify – under the hood
This module will cover content-based and non-content-based analysis, and how Magnet Verify fits within the framework of forensic multimedia analysis. Authentication analysis will be discussed with a focus on comprehensive forensic parsing. Students will also learn about the underlying research into structural analysis, which Magnet Verify is built upon, and the process through which Verify creates file signatures and performs comparative analysis against a known reference library of encoders. This module will conclude with a hands-on exercise during which students will perform a one-to-one manual comparison, using the same methodologies that are utilized by Magnet Verify.

Module 5: Image file format & manual authentication concepts
This module covers how JPEG files are encoded and structured, as well as how to identify and interpret individual objects within the structure through use of file format specification documents. This module includes an instructor-led exercise of how to parse an image file at the binary level utilizing a hex editor and concludes with a hands-on exercise during which students will identify the individual objects within an image file and thoroughly parse one of the structures.

Module 6: Analyzing Verify results for image files
Students will explore the Magnet Verify analysis strategy as it pertains to image files and be introduced to the data interpretation workflow. Structural analysis, embedded file metadata, attribute similarity analysis, structural consistency tests, proprietary and unknown structures, and the interactive viewer will be discussed in terms of image authenticity analysis. This module includes several in-depth instructor-led and student hands-on exercises involving JPEG files.

Module 7: Video file format & manual authentication concepts
This module covers how video files are encoded and structured, as well as how to identify and interpret individual objects within the structure through use of file format specification documents. This module includes an instructor-led exercise of how to parse a video file at the binary level utilizing a hex editor and concludes with a hands-on exercise during which students will identify the individual objects within a video file, outlining the file structure and locating objects that are embedded within other objects.

Module 8: Analyzing Verify results for video files
Students will explore the Magnet Verify analysis strategy as it pertains to video files and be introduced to the data interpretation workflow. Structural analysis, embedded file metadata, attribute similarity analysis, structural consistency tests, proprietary and unknown structures, and the interactive viewer will be discussed in terms of video authenticity analysis. This module includes several in-depth instructor-led and student hands-on exercises involving video files.

Module 9: Report production & legal proceedings
In this module, students will learn about the scientific validity of Magnet Verify and how to relay the concepts of deterministic versus probabilistic results. Legal admissibility standards and their various elements will be discussed. Students will also learn how to scope their examinations, how to produce a report within the Verify platform, and about opinion-based reporting. The proper terminology, as well as various factors which can add weight to expressed opinions, will be covered.

Module 10: Case studies with Verify
This module provides students with the opportunity to practice everything that they have learned throughout the course through several hands-on case study scenarios involving both image and video files. Students will perform authentication analyses, utilizing Magnet Verify to answer specific questions about submitted multimedia files.

Module 11: Tool validation & data verification
In this module, students will learn about the importance of tool validation and data verification. Different elements that can be built into a validation plan will be discussed. This module includes an instructor-led exercise of how to manually verify a metadata value parsed by Verify from a video file and concludes with a hands-on exercise during which students will also manually verify individual metadata values.

Module 12: Exam preparation
This final instructional module of the course focuses on preparation for the Magnet Certified Authenticity Examiner (MCAE) certification test. Several questions with the same general theme of those included in the certification test will be covered to ensure that students fully understand the concepts. Course overview
This two-day instructor-led course provides students with the knowledge and skills necessary to perform structural comparative analysis on digital image and video files and to articulate expert results in both a report and court of law. Students will learn how to manually decode multimedia files at the binary level, performing authentication examinations using file metadata and structure. We will be working within Magnet Verify. 

Similar courses

GK200 is an intermediate-level four-day training course, designed for participants who are familiar with the principles of digital forensics and are seeking to expand their knowledge base into iOS and Android examinations using Magnet Graykey. Students must be part of a law enforcement agency and must be cleared in advance to attend this course.

More Information

This course is an expert-level four-day training course, designed for participants who are somewhat familiar with the principles of digital forensics and who are seeking to expand their knowledge base on advanced forensics and improve their computer investigations. You can purchase training classes directly online using a credit card or if payment by purchase order is required, please request a quotation from sales@magnetforensics.com.

More Information

This course is an expert-level four-day training course, designed for participants who are familiar with the principles of digital forensics and who are seeking to improve their mobile device investigations. You can purchase training classes directly online using a credit card or if payment by purchase order is required, please request a quotation from sales@magnetforensics.com.

More Information

Magnet Axiom Examinations (AX200) is ideal for those who require intermediate-level training with a digital investigation platform that covers cases involving smartphones, tablets, computers, and cloud data in a single collaborative interface. This course is the perfect entry point for examiners who are new to Axiom. You can purchase training classes directly online using a credit card or if payment by purchase order is required, please request a quotation from sales@magnetforensics.com.

More Information

AX310 is an expert-level four-day training course, designed for participants who are familiar with the principles of digital forensics and who are seeking to expand their knowledge base on advanced forensics and incident response techniques and want to improve computer investigations. You can purchase training classes directly online using a credit card or if payment by purchase order is required, please request a quotation from sales@magnetforensics.com.

More Information

This course is an intermediate-level four-day training course, designed for participants who are somewhat familiar with the principles of digital forensics and who are seeking to expand their knowledge base into cloud-based and social media forensics. You can purchase training classes directly online using a credit card or if payment by purchase order is required, please request a quotation from sales@magnetforensics.com.

More Information

This course is an expert-level four-day training course, designed for participants who are somewhat familiar with the principles of digital forensics and who are seeking to expand their knowledge base on macOS and the forensic analysis of devices using the APFS file system and AXIOM. You can purchase training classes directly online using a credit card or if payment by purchase order is required, please request a quotation from sales@magnetforensics.com.

More Information

This course is an expert-level four-day training course, designed for participants who are somewhat familiar with the principles of digital forensics and who are seeking to expand their knowledge base on advanced forensics and improve their computer investigations. You can purchase training classes directly online using a credit card or if payment by purchase order is required, please request a quotation from sales@magnetforensics.com.

More Information

This course is an intermediate-level two-day training course, designed for participants who are familiar with the principles of digital forensics and who are seeking to expand their knowledge base into deep iOS file system examinations. You can purchase training classes directly online using a credit card or if payment by purchase order is required, please request a quotation from sales@magnetforensics.com.

More Information

Forensic Fundamentals (AX100) is a beginner-level course, designed for participants who are unfamiliar with the principles of digital forensics. You can purchase training classes directly online using a credit card or if payment by purchase order is required, please request a quotation from sales@magnetforensics.com.

More Information

Digital Video Investigations with Magnet Witness (DV200) is a beginner-level course, designed for participants who are not yet familiar with the concepts of the recovery and analysis of digital video files from commercially available digital video recorders.

More Information

Magnet Axiom to Cyber Transitions is ideal for those who are looking to continue their education and transition into the unique features of Axiom Cyber after taking the Axiom Examinations (AX200) course.

More Information

Magnet Axiom Examination (AX200 Microlearning) is ideal for those who are relatively new to forensics and want to learn how to utilize Axiom to get the most out of the forensic platform. Axiom is a platform that covers cases involving mobile device, computer, and cloud data in a single collaborative interface. Students will learn the workflows of how to interrogate and investigate devices containing digital media.

More Information

Core Mobile Acquisition and Analysis (AX150) is a beginner level course, designed for participants who are unfamiliar with the principles of mobile forensics. The course focuses on iOS and Android devices from the point of collection to the point of analysis whilst exploring Magnet Axiom and Magnet tools such as Magnet Acquire, the Magnet Custom Artifact Generator (MCAG) and Magnet Axiom Dynamic App Finder.

More Information

Core Mobile Acquisition and Analysis (AX150 Microlearning) is a beginner level course, designed for participants who are unfamiliar with the principles of mobile forensics. The course focuses on iOS and Android devices from the point of collection to the point of analysis whilst exploring Magnet Axiom and Magnet tools such as Magnet Acquire, the Magnet Custom Artifact Generator (MCAG) and Magnet Axiom Dynamic App Finder.

More Information

Magnet Axiom Advanced Mobile Forensics (AX300 Microlearning) details the use of Magnet Axiom’s advanced mobile analysis capabilities. Students will learn advanced analysis techniques and leverage Magnet Axiom Examine to become proficient in investigating advanced aspects of full file system extractions of both iOS and Android devices.

More Information

The Magnet Griffeye Examinations Course is a 3-day training course designed for students who have attended the Magnet Griffeye Lite online course or have already attained proficiency in Magnet Griffeye Advanced. The course is designed to equip you with the necessary skills and tools to handle media files effectively during a criminal investigation, thereby maximizing the productivity of the tool.

More Information

Magnet Verakey Examinations (VK200) is an intermediate-level four-day training course, designed for participants who are familiar with the principles of digital forensics and who are seeking to improve their mobile device investigations.

More Information

Magnet Axiom’s Portable Case is a lightweight version of the full capabilities found in Axiom—designed for easy access and analysis of forensic findings. It shares the ability to investigate the case data from digital devices and produce reports with non-technical stakeholders, such as investigators and attorneys.

More Information

Magnet Griffeye Lite is a limited, free version of Griffeye offered to law enforcement officials to navigate digital media more efficiently. In this free tutorial, available in numerous 20-minute-or-less modules, attendees will see how they can make the most out of their use of Griffeye Lite, including how to use the software, applying searching and filtering techniques, as well as creating reports and exporting.

More Information

This 4-day course starts with training in detailed binary analysis of digital multimedia files, specifically focusing on the most common formats, i.e., ISO BMFF (MP4, MOV, 3GP, 3G2, M4V) and RIFF (AVI). Building from this foundational skillset, the course continues with a focus on troubleshooting video files with H264 encoded video, specifically focused on AVCC implementations of H264 encoding in ISO BMFF files.

More Information

This course is a two-day, expert-level training program designed to equip digital forensic examiners with advanced skills for navigating complex mobile data. Emphasizing unsupported third-party applications, advanced data structures, and custom artifact creation, this course will provide essential tools for analyzing mobile device data with confidence.

More Information