yes the checker recalc the log CRC and compare to the final CRC stored inside , if a single byte change it means the log has been edited.
same thing with each image CRC , if there is a difference it means a JPG has been substed
so basically : removing, editing or changing a JPG => alert
touching anything in text log => alert