deepfake investigation (video / audio / image)
face-swap, voice-clone, identity-impersonation. PRNU + GAN fingerprint + ELA + lip-sync + audio splice.
start here · primary tools
ordered. work top-down. the first tool is the suggested entry point for this case type.
- video deepfake analyzerdrop a short video · sample frames · blink rate · face boundary flicker · temporal inconsistency score · runs locally
- face swap artifact detectordrop an image · jawline color mismatch · compression boundary heuristics · face-region signal table · runs locally
- gan fingerprint detectordrop an image · fft grid periodicity · color histogram anomalies · synthetic likelihood score 0–100 · runs locally
- ai synthetic voice generation artifact analyzeranalyze synthetic voice generation artifacts and identify possible AI-generated speech characteristics · spectrogram consistency, prosody, splice boundaries · runs locally
- audio splice detectordrop audio · spectral flux discontinuities · candidate splice timestamps · timeline table · runs locally
- ela image tampering detectordrop a JPEG · error level analysis · detect localized re-compression · flag tampered regions · visualize ELA map · runs locally
- prnu fingerprinterjpeg png sensor noise · residual fingerprint · pearson correlation · heatmap viz · LIKELY DIFFERENT · CSV · runs locally
- copy-move forgery detectordrop an image · block-matching copy-move scan · suspicious region overlay · heuristic clone map · runs locally
also useful · secondary tools
supporting and follow-up tools. surface as the investigation widens.
- video frame timestamp analyzerdrop an MP4 or WebM · step through frames · measure actual frame intervals · detect irregular timing · cut/splice indicators · frame drops · export timeline · runs locally
- video container forensic analyzerdrop mp4 mov mkv avi files · parse container atom box structure · extract all metadata tracks · chapter marks · embedded thumbnails · creation tool information · detect container manipulation · timestamp inconsistencies · runs locally
- audio edit detectordrop a WAV file · analyze spectral discontinuities · RMS energy shifts · noise floor changes · DC offset jumps · flag suspected splice points · runs locally
- metadata consistency checkerdrop a JPEG · PNG · or video · compare EXIF date vs file date vs filename date vs GPS timestamp · flag inconsistencies · dimension mismatches · runs locally
- electric network frequency audio authenticatordrop wav/mp3 · extract enf drift · splice checks · starter reference correlation · investigative only · runs locally
- case report generatorfill in case number · examiner · dates · findings · drop evidence files for auto hash · generates structured forensic report PDF · runs locally
run as a stack
skip the click-through. these presets are curated forensic pipelines you can save as a stack with one click and run on your evidence locally.
deepfake — image evidence kit
7 stepsdrop suspect images → AI provenance → face-swap artifacts → copy-move forgery → LSB/chi-square stego → report
- 01evidence-manifest-generatorhash every image file before pixel analysis
- 02ai-generated-image-provenance-analyzermodel / generator fingerprint hints from metadata and artifact patterns
- 03gan-fingerprint-detectorFFT grid periodicity + histogram anomalies — synthetic image screener
- 04face-swap-artifact-detectorboundary and blending artifacts around swapped facial regions
- 05copy-move-forgery-detectorcloned-region detection — common in composite fakes
- 06image-stego-detectorchi-square / RS / LSB analysis on decoded pixels
- 07case-report-generatordraft a report suitable for legal review of still-image authenticity
deepfake — video temporal kit
3 stepsdrop short MP4/WebM clips → sampled frame temporal metrics → blink rate + boundary flicker → report
- 01evidence-manifest-generatorhash every video clip before frame sampling
- 02video-deepfake-analyzersample frames locally — blink rate, boundary flicker, temporal score
- 03case-report-generatordraft a report on temporal face metrics for the clip set
deepfake — audio authenticity kit
5 stepsdrop suspect audio → ENF grid analysis → splice detection → LSB stego screen → report
- 01evidence-manifest-generatorhash audio files before spectral analysis
- 02enf-audio-authenticatormains hum (ENF) presence + splice markers — investigative screening only
- 03audio-splice-detectorspectral-flux discontinuities suggesting edit points
- 04audio-stego-detectorLSB / chi-square / echo analysis on decoded PCM
- 05case-report-generatordraft a report summarizing ENF + splice + stego signals
deepfake — camera PRNU kit
3 stepsdrop 2+ JPEG/PNG from claimed same camera → sensor noise fingerprint → pearson correlation → report
- 01evidence-manifest-generatorhash every image before PRNU analysis
- 02prnu-fingerprinteraccumulated noise residual K + per-image correlation — probabilistic screener only
- 03case-report-generatordraft a report on whether images likely share the same sensor