Systems and methods are disclosed for analyzing different media to determine if the media originated from the same source. A two-part analysis is provided. During the first part, target data streams are analyzed to determine a template for the data stream or file, based upon the encoder used to encode the media transmitted in the data stream or stored in a file. After generating templates for the different streams, the templates are compared to determine which streams have matching templates. The second part of the analysis includes monitoring streams with matching templates to identify the same piece of media content in each of the streams. Upon identifying the same content, the content of each stream is synchronized and then compared to determine if the compared pieces of content were generated using the same encoder.