Making DVR Video Recovery Possible

DVR Examiner is a software solution for the recovery of video and metadata from DVR surveillance systems in a forensically sound manner. This game changing software can help agencies save time and money when recovering video evidence by recovering data directly from the DVR, bypassing passwords to recover video, including deleted data, from a DVR.

Many DVR users believe that by deleting video through the DVR interface, they are rendering video unrecoverable. Fortunately for forensic investigators, this is not the case. In most instances, when video is deleted through the DVR interface, only the index (or accessibility) to that video is being deleted. Assuming the video itself has not been overwritten, DVR Examiner may be able to recover it.

DVR Examiner can recover deleted DVR video by using the “inaccessible recovery” feature in DVR Examiner. What does “inaccessible” mean? In short, it refers to video that the DVR no longer knows how to find. A less precise term for this would be “deleted”, but there are several ways a video can become inaccessible other than deliberate deletion by the user. The most common way would be that the DVR was operating normally and simply needed more space for newer video.

When you initially scan a HDD, one of the first screens that comes up is the Supported System Identified screen. This screen displays all the features that DVR Examiner supports for this particular filesystem. If inaccessible recovery is supported, the “Inaccessible” icon (on the far left) will be highlighted in orange.

DVR Examiner supports two inaccessible recovery types. The first type, simply called “Inaccessible”, refers to the ability of DVR Examiner to locate large segments of deleted DVR video that the DVR no longer recognizes. For example, when a disk is reformatted or deleted, if no additional video is recorded, all the original video is largely intact but simply missing index entries. The second type, “Frame Level Inaccessible” refers to the ability of DVR Examiner to recover very small segments of video which may have been partially overwritten by newer video. This is a much more complex and complete recovery type – we’re often able to recover some video from weeks or months in the past that was never actually overwritten. Keep in mind that either recovery type will typically result in a slower scan process.

By recovering inaccessible video, DVR Examiner has helped solve countless cases by providing valuable information from the scene of the crime. You can try out this feature for yourself with a free 30-day trial of DVR Examiner.

Note: ETM Insights is a sponsored section of EvidenceMagazine.com

 
< Prev   Next >






Court Case Update

FINGERPRINT EVIDENCE went through a nearly three-year ordeal in the New Hampshire court system, but eventually emerged unscathed. On April 4, 2008, the New Hampshire Supreme Court unanimously reversed the decision of a lower court to exclude expert testimony regarding fingerprint evidence in the case of The State of New Hampshire v. Richard Langill. The case has been remanded back to the Rockingham County Superior Court.

Read more...