Forensic report of Bryan Neumeister

=== Page 1 === --

Forensic Report 1.0 Prepared by Bryan Neumeister Certified: Federal, US District, State, Department of Justice, Civil & Aviation Forensie Expert ACFE, ABRE, ASCAP, APA, ACFEI, AES, BMI, NATAS 31 Years Professional Experience USAForensic Audio & Video Labs

Case Date: 2/6/2012 Sri Nithyananda Swami

A number of Video clips of were forwarded to our labs. We have been asked to authenticate the clips. The clips are all from the same video source but the clips we received (as "YouTube" Links) were in different aspect ratios, sizes and frame rate. The purported "original clip" in its original codec and the actual recorder are requested to perform tests on.

There are questions as to whether the video could have been faked. The simple answer is. Yes, quite simply. With today's roto-scoping faces on stunt persons in the motion picture industry commonplace, the technology is available for anyone with a little knowledge and a mid range home computer to be able to render scenes like these.

Facial mapping has been done for years in the movie industry. Many of the programs used for hi-tech animation, motion tracking software, planar tracking and the like are available for purchase by the general public at reasonable prices.

The US and India both have very large television and film production communities with large pools of knowledgeable and technically skilled crews. Before we get into the technical aspects of the video clips, how can such a video be "created" or 'faked"

Most commonly one would start with a green screen. A green screen environment can be created in almost any studio, living area, room, garage ete.

=== Page 2 === It does not even require "Chroma Key Green or Chroma Key Blue these days. {{{ Chroma key compositing (or chroma keying) is a technique for compositing (layering) two images together. A color range in the top layer is made transparent, revealing another image behind. The chroma keying technique is commonly used in video production and post-production. This technique is also referred to as color keying, color-separation overlay green screen, and blue screen. It is commonly used for weather forecast broadcasts, wherein the news presenter appears to be standing in front of a large map during live television newscasts, but in a television studio it is actually a large blue or green background. The meteorologist stands in front of a blue screen, and then different weather maps are added on those parts in the image where the color is blue. If the meteorologist wears blue clothes, his clothes will be replaced with the background video. This also works for green screens, since blue and green are considered the colors least like skin tone. This technique is also used in the entertainment industry, for example for special effects. Software is available today, such as Pinnacle Studio, which makes it possible and relatively easy for the average home computer user, to create videos using the Chroma Key function and green screens. }}

The Chroma Key could be used to create the bedroom in this case. The people in the scene could be anybody of similar stature. In the early days of rotoscoping and mapping. Green screen suits were worn with blue "ball" markers so the animators could use them as points or reference for motion tracking. This isn't necessary anymore, though sometimes faster, depending on what you are trying to accomplish. Facial mapping is done using facial nodes or points on the face that can be tracked in a 3D environment by computer. These days when a movie star is doing something such as a stunt, their face can be mapped onto a stunt person, so it looks as though the star is doing the stunt. The stars face can also be mapped over a completely animated figure. Cranial points, The Vertex, Supraglabella, Glabella, Euryon and auriculotemporale points on the skull would be common marking points for tracking. (below)

=== Page 3 === 1

10. 14* 612

2 .3 16

18 4

13 19. 6 .7

8

9

Figure 1.1. Cephalometric Points - Frontal View: 1 = vertex; 2 = glabella; 3 = nasion; 4 = subnasale; 5 = labiale superius; 6 = stomion; 7 = labiale inferius; 8 = labiomentale; 9 = gnathion; 10= euryon; 11 = auriculotemporale; 12 = zygion; 13 = gonion; 14 = ectocan- thion; 15 = endocanthion; 16= iridion mediale; 17 = iridion laterale; 18 = alare; 19 = che- lion.

=== Page 4 === 18 19 22 (.21 20 17

14 23

15 .5

8 16 10 11 ·12

13

Figure 1.2. Cephalometric Points - Lateral View: 1 = supraglabella; 2 = ciliare (glabella); 3 = nasion; 4 = nasale; 5 = pronasale; 6 = subnasale; 7 = superior labial sulcus; 8 - labi- ale superius; 9 = stomion; 10 = labiale inferius; 11 = labiomentale (inferior labial sulcus); 12 - pogonion; 13 = gnathion; 14 = ectocanthion; 15 = alare; 16= chelion; 17 = gonion; 18 = superaurale; 19 = postaurale; 20 = subaurale; 21 = preaurale; 22 - tragion; 23 - orbitale.

=== Page 5 === The numbered points above would be most commonly used to track facial expressions, create facial expressions, lip sync etc. Lateral Points, Orbital Points, Nasal Points, Labial Points, Mental Points, Planes, Areas along with lines and groves make up basic Facial Geometry .* (*Facial Geometry- Graphic Facial Analysis for Forensic Artists) The same points used for Forensic Facial Analysis are the basis for facial replacement on video. Adding and subtracting other people in the same scene, even after green screening is possible using programs like Imagineer systems "Mocha". (http://www.imagineersystems.com/products/mochav2) for demonstrations.

This planar tracker and roto utility operates on many systems, is relatively simple to use and is very effective at creating "alternate realities." Adding another person to a video or taking a person out becomes quite simple using products such as Mocha. Here is a quick example using a lift from the video in question.

=== Page 6 === This was done in yery quickly ... and not by an artist, in under 30 minutes. It's very simple. Given another 30 minutes it could be made much more convincing by adjusting the texture and lighting as well as blending the composite layers.

=== Page 7 === The Video itself. The benefit of sites like "You Tube" for someone posting up an altered video is "compression". Videos that are loaded up to most of these sites are compressed for easier playback by the masses. Often the file type or codec is also changed from the original. The more compressed a signal is the harder it becomes to spot irregularities in a video. The compression of a video file (to make it smaller and easier to play from the web) results in digital noise. The more compressed the noisier the signal (picture) is.

This noise creates masking, making it difficult to spot chromatic aberrations and similar "tells".

{f{In optics, chromatic aberration (CA, also called achromatism or chromatic distortion) is a type of distortion in which there is a failure of a lens to focus all colors to the same convergence point. It occurs because lenses have a different refractive index for different wavelengths of light (the dispersion of the lens). The refractive index decreases with increasing wavelength.

Chromatic aberration manifests itself as "fringes" of color along boundaries that separate dark and bright parts of the image, because each color in the optical spectrum cannot be focused at a single common point. Since the focal length f of a lens is dependent on the refractive index n, different wavelengths of light will be focused on different positions.

There are two types of chromatic aberration, axial (longitudinal), and transverse (lateral). Axial aberration occurs when different wavelengths of light are focused at different distances from the lens, i.e. different points on the optical axis (focus shift). Transverse aberration occurs when different wavelengths are focused at different positions in the focal plane (because the magnification and/or distortion of the lens also varies with wavelength; indicated in graphs as (change in) focus length). The acronym LCA is used, but ambiguous, and may refer to either longitudinal or lateral CA; for clarity, this article uses "axial" (shift in the direction of the optical axis) and "transverse" (shift perpendicular to the optical axis, in the plane of the sensor or film).

These two types have different characteristics, and may occur together. Axial CA occurs throughout the image, and is reduced by stopping down (this increases depth of field, so though the different wavelength focus at different distances, they are still

=== Page 8 === in acceptable focus). Transverse CA does not occur in the center, and increases towards the edge, but is not affected by stopping down. In digital sensors, axial CA results in the red and blue planes being defocused (assuming that the green plane is in focus), which is relatively difficult to remedy in post-processing, while transverse CA results in the red, green, and blue planes being at different magnifications (magnification changing along radii, as in geometric distortion), and can be corrected by scaling the planes appropriately so they line

Using Electronic scopes (Waveform, Vector Scope, RGB Parade and Luminance) it is easy to see chromatic aberration, and various other traits of a lens. A wide angle lens used in the making of this video will handle light different than a lens of a different number of elements or focal length would. Using the original camera: a test would be performed using a chip chart and color bars. Either NTSC or PAL depending on the format of the camera. (see Below)

=== Page 9 === C

USAForensic

Photographing the Black & White Chip Chart & the Color Bar Set up card would show Chromatic aberrations (RGB separation) on the scopes. This deviance could be measured and compared to the picture coming from the original camera. Distance from the camera, light sources, color temperature of the light source(s) would have to be factored in. Any scratches on the lens or dead pixels on the CCD chip would also be noted.

=== Page 10 === This is an important baseline test because many people doing a composite would not take into account dead pixels or chromatic aberrations. These begin to play a factor in compositing. If there is a dead pixel on the "plate shot"- first layer of video, then it should be present throughout the entire video. If, for example, a person or item crosses the dead pixel and it disappears and reappears as the person passes it ... that is a very good "tell" it is a fake. It works the same for lens scratches, dust or any other irregularities on the plate shot.

Shadows are also important in composite shots. Does the light source remain constant .? Are there any unaccounted for shadows, shadows missing, or not aligned with the light source?

Is the color Purple, if in the shot, consistent. purple is the most difficult color for RGB cameras to accurately reproduce. It tends to go various shades of blue without a proper white balance. If the shades of purple shift, that's also something to be analyzed.

Benefits of compression masking aberrations through noise:

{{ A compression artifact (or artefact) is a noticeable distortion of media (including images, audio, and video) caused by the application of lossy data compression. Lossy data compression involves discarding some of the media's data so that it becomes simplified enough to be stored within the desired disk space (known as a data rate or bit rate for media that is streamed). If the compressor could not reproduce enough data in the compressed version to reproduce the original, the result is a diminishing of quality, or introduction of artifacts. Alternatively, the compression algorithm may not be intelligent enough to discriminate between distortions of little subjective importance and those which may be objectionable to the viewer.

Compression artifacts occur in many common media such as DVDs, common computer file formats such as JPEG, MP3, or MPEG files, and some alternatives to the compact disc, such as Sony's MiniDisc format. Uncompressed media (such as on Laserdiscs, Audio CDs, and WAV files) or losslessly compressed media (such as FLAC or PNG) do not suffer from compression artifacts. The minimization of perceivable artifacts is a key goal in implementing a lossy compression algorithm. However, artifacts are occasionally intentionally produced for artistic purposes, a style known as glitch art or datamoshing. Technically speaking, a compression artifact is a particular class of data error that is usually the consequence of quantization in lossy data compression. Where

=== Page 11 === transform coding is used, they typically assume the form of one of the basis functions of the coder's transform space. When motion prediction is used, as in MPEG-1, MPEG-2 or MPEG-4, compression artifacts tend to remain on several generations of decompressed frames, and move with the optic flow of the image, leading to a peculiar effect, part way between a painting effect and "grime" that moves with objects in the scene. Data errors in the compressed bit-stream can lead to errors similar to large quantization errors, or can disrupt the parsing of the data stream entirely for a short time, leading to "break-up" of the picture. Where gross errors have occurred in the bit-stream, decoders continue to apply updates to the damaged picture for a short interval, creating a "ghost image" effect, until receiving the next independently compressed frame. In MPEG picture coding, these are known as "I- frames", with the 'I' standing for "intra".

Mosquito noise

Video compression artifacts include cumulative results of compression of the comprising still images, for instance ringing or other edge busyness in successive still images appear in sequence as a shimmering blur of dots around edges, called mosquito noise, as they resemble mosquitoes swarming around the object}}}

If a person is going to produce a composited fake. One of the best weapons in the arsenal is video noise. It covers up edges and fine lines that might otherwise show faults in the composite. Beyond the technical issues. One must also take into context why someone would want to create a composited video file. A political, religious, celebrity or business figure would be a common target. Many tabloids make millions of dollars by taking pictures out of context or altering images.

Example: A picture out of context would be a photo of a celebrity in the middle of a "eye blink" ... possibly making the celebrity look intoxicated. Of course, though not important to the public in general, but legally significant is "how was the video obtained" ::: was the process legal in the country or region.

=== Page 12 === The original Recorder and recording(s) were never turned over to the client or our labs. A "Forensic Report" was however filed with the client. The report has no actual scientific data on it whatsoever. It is an inventory sheet of what was received and a persons best guess that the client and person on the video matched. No forensic tests were performed according to the report. It was the person's estimation the person on the screen was the client and the recording was an original. No tests were done to look for compositing. Below is the report.

=== Page 13 === Form No. FSL/DELHITEM/03/24/24.12.2007 FORENSIC SCIENCE LABORATORY GOVT OF NCT OF DELHI SECTOR-14, ROHINI, DELHI - 110085 234 Forwarding Letter (Physies Division) No.FSL. 1e f-263/ fhy -9 3 10 246y Dated: 3/6//o

To. A. ESf Chuan Leddy

Subject: Examination of case property in FIR No 141 D

MEMO Please find enclosed herewith Report No. FSL-2o1e f-2e11144-33/19 Dated in respeet of case property reccived with your Memo n0. - Dated ere

All the coneerned case property / exhibits are enclosed as per the details mentioned in the report.

DIRECTOR Encls : (1) Sealed Report sealed parcels (3) Sample scal impression

TRUL CONT

=== Page 14 === Form No. FSLIOELHIFM/03/21/24.12.2007 (Page 01 of 02) Forensic Science Laboratory Govt. of NCT of Delhi Sector 14, Rohini, Delhi-110085. Tel: 011-27535311. Fac 011-27555890 23 FSL DEIHI T-1705 Aceredited by the National Accreditation Board for Testing and Calibratien Laberatories (NABL) Examination Report REPORT No. ESL 2010/P-2031/PHY-93/10 Dated 02 6 |10 1. Pieise quote the Rteport (Opinion) No. & Date in all future ooerespondence & Summons 2. This Repon i Par se atmlssible U/S.293 Cr.P.C.

To Sh. K.S.R. Charan Reddy, Dy, Inspector General of Police, C.I.D. Bangalore Your letter No.CRM.LL/SE CID/2010/Bangalees Dated 12.05.10 regarding two parcels in connection with ease FIR No.141/10 Dated 18.03.10 UIS 495(A), 376, 177, 420-906() & 120B IPC P.S. Bidadi, Ramanagar. Kamstaka duly reccived in this office on 13,05.10 through Insp. K. Naguraja, CID Bangalore,

1. DESCRIPTION OF PARCEL (S)/EXHIBIT (S) Sealed cloth parcels : 02 (Two)

Tot 02 (Two) Two sealed pascels: seals were intact nnd tallied with the specimen scals as per forwanding letter (FSL FORM). 2. DESCRIPTION OF ARTICLES CONTAINED IN THE PARCEL (S)/EXHIBIT (S)

Pareel-1: One sealed cloth parcel found marked "Article8", scaled with the seals of "TSR" at eight places, stated to be containing, two memory cards; on opening, two memory cards were found and they were marked as "Exhibit-IA" & "Exhibit-1B" in the laboralory. Exhibit-IA: One memory card of "Sandisk" make, bearing serinl mumber B10922313493G (Nade in China) containing video recordings, Exhibit-1B: One memory card of "Sandisk" make, bearing serial number B10922413493G (lade in China) containing video recordings.

=== Page 15 === Form No. FSL/DELHI/FM/03/23/24.12.2007 (Page 02 of 02)

Parcel-2: One sezled cloth parcel, sealed with the seals of "TSR" at cight places, stated to be containing, one DVD; on opening, ore DVD was found and it was marked as "Exhibit-2" in the laboratory. Exhibit-2: One DVD of "Moserbeer" make, containing video recordings, 3. RESULTS OF EXAMINATION/OPINION: The memory card marked "Exhibit-LA" contains 70 vidco clips and the memory card marked "Exhibit-1B" contains 213 vieo elips. On examination using ENCASE tool, it was found that there were 24 deleted files in the memory card marked "Exhibit-FA" and same have beem retrieved from memory card marked "Exhibit-LA" and there were 34 deleted files int the memory card marked "Exhibit-IB"and same have been retrieved from memory card marked "Exhibit-IB" and DVD marked "Exhibit-2" contains 116 video clips. The video clips in DVD marked "Exhibit- 2" ure also in the memory cards marked "Exhibit-1A" & "Exhibit-1B". On examination of video recondings in memory cards marked as "Exhibit-1A" & "Exhibit- IB", the followings were observed; = The video recordings in memory cards marked "Exhibit-1A" & "Exhibit-IB" contains in camera vidoo shocs in separate vidco elips. The video clips in memory eards marked "Exhibit-IA" & "Exhibit-1B" contains 70 & 213 klentified video shots respectively. 2. The video recordings in memory cards marked "Exhibit-1A" & "Exhibit-1B" are in digital video forma and there are no indicatioa of alteration in the identified video shots on the basis of examination using Non-Linear Video Editing & Storage System & Video Analyst System. 3 The retrieved video recordings of the deleted files from the memory cards along with the video recordings in the memory enrds marked "Exhibit-1A" & "Eshibit-IB" are provided in DVD marked "Copy of Exhibit-IA & Exhibit-IB".

NOTE: Case exhibits sent to this laboratory for examination have been sealed with the seal of "Dr.C.P. SINGH- FSL-DELHI'. Examined by

(Di. C,P. SINGH) Dr. C. P. SINGH Asstt. Directr (Physies) Forenidc Siclencs Lahorran

TRUE CU

=== Page 16 === Fonn No. FSL/DELHI/FM/03/21/24.12.2007 Page 01 of 03) 230 Forensic Science Laboratory Govt. of NCT of Delhi Madhuban Chowk, Sector 14, Rehini, Delhi-110085 Tel: 011-27555811, Fax: 011-27555890 T-1705 Accredited by the National Accreditation Board for Testing and Calibration Laboratories (NABL)

Examination Report REPORT No. FST. 2010/P-3243/PHY-152/10 Dated [L| 11 16 1. Plcase quote the Report (Opinion) No. & Date in all future corespondence & Sumntions. 2. This Report is Per ae odmissible U/S.293 Cr.P.C.

To Sh. K.S.R. Charan Reddy, IPS D.I.G. of Police, C.I.D., Bangalore. Your letter No.CRM/1.ISE/CID/2010 Dated 24.07.10 regording four parcel in conneetion with case FIR No.141/2010 Dated NIL U/S 295(A) 376. 377. 420, 506(0) & 120 B IPC. P.S. Bidali, Ramanagar, Kamnataka duly received in this office on 27.07.10 through Inop. Sh Raveesh C.R. I.D.522/2010 1. DESCRIPTION OF PARCEL (S) /EXHIBIT (S) Sealed envelopes 02 (Two) Sealed eloch parcels 02 (Two)

Tota 04 (Four) Twelve sealed envelopes; scals were intact and tallied with the specimen seals as per forwarding kctier (FSL FORM). 2. DESCRIPTION OF ARTICLES CONTAINED IN THE PARCEL (SVEXHIBIT (S)

Parcel-]: "One Saled cloth parcel, scaled with the scal of "Y-I"" at cight places stated to be condining two memory cardds; on opening, two memory cards were found and these were markell as "Exhibit-1" & "Exhibit-2"" in the laboratory. Exhibit-I: One menjory card 'SDHC 8 CB' of "San Disc" make, with serial No."B1092231 34936* nmee in China. The facial image of the male person in the video recording Rd war matbed as "Exhibit-QMFI" and the facial image of female person whu was

SPsE D .. C. P SINGH

=== Page 17 === 2.3 Form No. FSL/DELHIFM/03/23/24.12.2007 (Page 02 of 03)

seen adjusting the 'spy camera" and was found in intimate position with the male person and seen involved in other activities with the male person in the vidco recordings was marked as"Exhibit-QFFI" Exhibit-2: One memory card 'SDHC 8 GB" of "San Disk" make, with serial No."B10922413493G" made in China. The facial image of the male person in the video recording was marked as "Exhibit-QMFI and the facial imnge of female person who was seen installation of "spy camera" and other activities in the video recordings was marised as "Exhibit-QFFI". Parcel-2: One chvelope, scaled with cellophane tape stated to be comtaining DVD; on opening, one DVD was found and it was marked as "Exhibit-3" in the laboratory. Exhibi-3: One DVD-R of "Moserbatr" mako, containing two folders, namely, "Photos" & Video", The folder, namely, "Photos" containing eight still images, namely, "DSC00056.JPG", "DSC00057JPG", "DSC00058.JPG", "DSC00059JPGT, "DSC00060.JPG", "DSC00061JPG", "DSC00062.JPG" & "DSC00064.JPG" and the folder, namely, "Video" containing one vidco file, namely, "Vidco MTS", The specimen sample of facial image of female person in the video recording and still photographs (Digital) was marked as "Exhibit-SFFT". Parcel-3: One eavelope, sealed with cellotape stated to be containing DVD; on opening, one DVD-R was found and it was marked os "Exhibit-4" in the laboratory. Exhibit-4: Onc DVD-R of "Moserbaer" make, containing one video filc, namely, "Vileo,MTS" alongwith the still photographs. The specimen sample of facial image of male person in the video recording and still phoographs (Digital) wns marked as "Exhibit-SMFF. Parcel-4: One scaled cloth parcel, scaled with the seal of "Y-I' at thirteen places stared to be containing "a silent air purifier with an inbuilt Sony Spy Camera with two electronis chips, one adapter and a connecting cable; on opening, one spy camera kept in a body ol'air purifier , otte adaptor and connecting cable were fond. Exhibit-5: One spy camera "Sony" make, kepe in a case of air purifier with one nidaptor and connecting cable. 3. RESULTS OF EXAMINATION/OPINION: 1. On examination of "spy camera' marked "Exhibit-5" which is built inside in a air purifier case; it was found in working condition. 2 The video recording in the memory chips marked "Exhibit-I" & "Exhibit-2" can be rocorded by the 'spy camer", marked "Exhibit-5". 3. On examination of memory slots of 'spy camera' it was found shat the original memory cards marked "Exhibit-1" & "Exhibit-2" can be inserted in the memory slot of "spy camera' marked Exhibit-5 and vidco recordings can be done in these memory cards in the sume fotmal.

=== Page 18 === 2.32 Form No. FSL/DELHI/FM:03/23/24.12.2007 (Page 03 of 03)

REPORT No. FS1. 2010/-3243/PEY-152/14 Datec

4. On image analysis and comparison of verbal portrait features, geometric and faclal image superimposition of the image of the male person marked "Exhibit- QMFI" frem the relevant video frames and the image of the person marked "Exhibit-SMFI" from relevant video frames and still images in Exhibi-1, the image of the person marked "Exhibit- QMFI" has resemblance to the image of the person marked "Exhibit-SMFI" in respect of their facinl landmarks. Hence, the images of the person marked "Exhibit-QMFI & "Exhibit-SMFI" are of the same person. 5. On image snalysis and nemspariion of verbal ponraii fentures, geometric and facial lmage superimposition of the image of the female person marked "Exhibit- QFFI from the relevant vidoo frames and the image of the person marked "Exhibit-SFFT" from relevant video frames and still images in Exhibit-3, the image of the person marked "Exhibit-QFFI" has resemblance to the image of the person marked "Exhibit-SFFI" in respect of their focial landmarks. Hence, the images of the person marked "Exhibt-QFFI" & "Exhibit-SFFI" are of the same person

NOTE: Case exhibits sent to this division for examination have been sealed with the seal of "Dr.C.P. SINGH-FSL.DELHI' Examined by

(Dr. C .. SINGH

Noce: This Repert ia Per se admisdble LS.293 Cr.P.C. However, the seiontific expert (witnes)) shall be available for cross exar ination, if soquited

RUE COZT

At the close of the report it says the expert witness shall be available for cross examination; The following questions should have been addressed on the report but were not:

=== Page 19 === MISSING TECHNICAL REPORT DATA CAMERA: 1. Type of Camera used: brand, model number, serial number, year of manufacture. 2. Type of Codec native to the camera 3. Frames per second 24p, 29.97, 30fps, 59.97. 60fps ete. 4. Drop Frame, non-Drop ? 5. CCD 1080, 740, 486, 320 ete 6. Upper field, lower field, progressive 7. Interlace method. Interpolated, Field blend, none 8. Power supply 50 cycle or 60 cycle 9. CCD Charged Couple Device type- Manufacture 10. Technical specifications of CCD. 11. Bit Depth 12. Image data gathering technique and specifications 13. data compression algorithm 14. DA & AD signal converters (Digital to Analog & Analog to Digital) 15. Trigger method of camera. Motion sensing? 16. Lux level of camera with lens used. (see 17) 17. Black level of camera on appropriate color card (PAL-NTSC) set up at c 18. RGB output of chip to recorder using appropriate color card (PAL-NTSC) set up at 6300K, 3200K, 5400K 4300K 19. Pin Hole test of camera wide open Capped to test for chip pixel damage. 20. Microscopic analysis of CCD using microscope with camera attachment to look for chip irregularities. 21. Microscopic analysis of lens to search for scratches that could lead to chromatic aberrations detectible on video scopes

=== Page 20 === 22. Use of set up card and chip chart recorded for Waveform, Vectorscope, RGB Parade and Luminance of camera at 6300K, 3200K, 5400K 4300K. Waveform should reach 100% but not clip. 23. Camera Knee set up 24. Noise visible by scope of black levels on chart when chart white panel reaches 100% - Same test at 50% and 20% 25. Clip setting of whites 26. Black level setting of camera 27. Color temperature (s) of lights in video, shadows and color temperature of shadows. 28. Lens: angle of lens. (Millimeters) (lowest lens F stop ... 1.4, 1.8 etc) 29. Shutter of lens (how many leaves if applicable) 30. Bokeh (lens depth of filed being consistent with MM of lens used. 31. Number of elements in lens. 32. The television in the background has a different refresh rate than the camera .. Crystal sync or Clear Scan could be used to determine the difference of the camera vs the known refresh rate of the TV model. Thus helping to verify if the stated camera was indeed the one used.

AUDIO: if applicable: 1. Sample rate of Audio: 2. Bit Depth of audio 3. Stereo field of audio if applicable. 4. Phase cancellation of signal test 5. Type of mic used (carotid, directional ... etc) 6. Noise floor of microphone 7. db rating of microphone 8. Audio DA & AD specifications

=== Page 21 === 9. Distortion of signal at different decibel and Fq ranges from 20Hz to 20kHz 10. Output format

NTSC-PAL Time Code of combined signal: 1. Was time code imprinted on the original file. 2. was a clock setting imprinted on file. 3. how was the clock set to insure accuracy.

Was the Video re uploaded into the camera. ( using file directory, was a video uploaded into the on board chip at any time?

STORAGE:

1. Files were said to be erased on the San disc cards. Was there an attempt to recover those files. If not why? 2. It is not said if the San dise files were internal or external. 3. Assuming they are external, what was contained on the original internal card or frame buffer? 4. What was the formatting of the San Disc cards Fat 32, NTFS, Proprietary. 5. Was the codec used for recording proprietary. 6. What program was used to extract the video from the camera/recorder? 7. What program was used to change the file type if it was changed to another format. 8. What was the Dithering set up if the files were converted. 9. What compression was used in the conversion. 10. What is the data rate of the converted file

=== Page 22 === 11. What was the format recorded: a 4:4:4 or 4:2:2 ete ? 12. was the conversion made using a loss less codec or a compressed algorithm.

13. A relatively simple computer program ENCASE was used to review the disc. It was not stated what program(s) was used to analyze the video. It just says non- linear video application. 14. What instruments were used to analyze the signal?

IDENTIFICATION: 1. No scientific data is presented as to how recognition of the subject(s)in the video was made 2. It takes at least 50 pixels between pupils of the eyes for credible facial recognition software to work 3. Just guessing by doing a photo overlay is not usually admissible in a US court of law because the variation of lens (millimeter), distance from the subject to the camera, lighting and shadow differences, color temperature differences. aperture and speed of shutter variations. The exception is if thee are more than 50 pixels between the pupils as a rule of thumb. 4. Matching of low resolution pictures is merely guesswork and conjecture. 5. There are over 82 nodal points on the skull /face that should be matched to present clear evidence. 6. As facial mapping , roto-scoping and tracker planing are so easy to do an a computer. 7. Pixels should be analyzed to look for irregular color shifting and pixel blending as well as pixels consistently shifting in areas of chromatic aberration or lens flairs. 8. Green screen artifacts should be looked for closely in areas of differing contrast along edges of moving objects (people)

=== Page 23 === PROCEDURE OF RECORDING: 1. Was the recording obtained legally? 2. Were any laws broken during the placing of the recorder 3. Was there trespassing in violation of any national, state or regional laws. 4. Were the rights of the people on the video violated in anyway according to law 5. Has the person or persons who allegedly recorded this been charged with any crime? 6. do the person or persons have any previous records of violating any laws.

Recommendation:

I would request to examine the original camera with the original video, in its original codec still on the camera. I understand it is being held as evidence. A chain of custody of the evidence would be strictly upheld.

Respectfully,

Bryan Neumeister Certified: Federal, US District, State, Department of Justice, Civil & Aviation Forensic Expert ACFE, ABRE, ASCAP, APA, ACFEI, AES, BMI, NATAS 31 Years Professional Experience USAForensic Audio & Video Labs