Introduction
When a voyeurism case leads to a seized computer and a suspicious device, the questions start piling up fast. Is this a one-off? How much media is there? And more importantly — can you even link the files back to the device when it has no branding, no metadata, and no obvious signature?
That was the situation facing one investigator. They had a suspect, a computer and a recovered hidden camera but the device appeared custom-built and unbranded — cobbled together from components purchased online.
No camera model, no serial number and no typical trail but S21 VisionX found something others didn’t.
The investigator exported all image and video content from the suspect’s computer into a single analysis within S21 VisionX. Their goal: to identify which files originated from the spy device.
They began by loading a sample image from the device as a reference. As expected, standard tools couldn’t identify any embedded manufacturer data — and neither could other software.
But S21 VisionX went further.