Skip to content

ForensicELA

Status: Research prototype

ForensicELA examines images and video frames using Error Level Analysis across multiple, configurable compression levels.

ForensicELA is an open-source forensic triage instrument designed to support examiner review of potential image manipulation. It does not issue final authenticity opinions. It identifies technical features, inconsistencies, or artifacts that may warrant further analysis.

GitHub Repository


What It Examines

  • Error Level Analysis response across a configurable range of compression levels
  • Regions whose recompression behaviour differs from the surrounding image
  • Batch-level anomaly ranking across an image set
  • Threshold-flagged regions, documented with pixel coordinates

What It Produces

  • Methodology-documented, numbered exhibit images
  • A batch summary report with anomaly rankings
  • A threshold flag log with pixel coordinates
  • Tool name, version, parameters, analysis timestamp, and a case reference field on every output

Scope Limitation

This tool supports forensic triage and examiner-led analysis. A finding is not, by itself, an authentication opinion. A clean result does not prove authenticity, and a flagged result does not prove manipulation.

Availability

GitHub: github.com/ramikhashmel/ForensicELA

Install (from source):

pip install git+https://github.com/ramikhashmel/ForensicELA.git

Usage:

forensicela --input evidence.jpg --output report/ --levels 75,85,95 --threshold 0.15

Note

ForensicELA is a research prototype and a screening signal. Findings should be interpreted alongside other analytical methods.