Making DVR Video Recovery Possible

DVR Examiner is a software solution for the recovery of video and metadata from DVR surveillance systems in a forensically sound manner. This game changing software can help agencies save time and money when recovering video evidence by recovering data directly from the DVR, bypassing passwords to recover video, including deleted data, from a DVR.

Many DVR users believe that by deleting video through the DVR interface, they are rendering video unrecoverable. Fortunately for forensic investigators, this is not the case. In most instances, when video is deleted through the DVR interface, only the index (or accessibility) to that video is being deleted. Assuming the video itself has not been overwritten, DVR Examiner may be able to recover it.

DVR Examiner can recover deleted DVR video by using the “inaccessible recovery” feature in DVR Examiner. What does “inaccessible” mean? In short, it refers to video that the DVR no longer knows how to find. A less precise term for this would be “deleted”, but there are several ways a video can become inaccessible other than deliberate deletion by the user. The most common way would be that the DVR was operating normally and simply needed more space for newer video.

When you initially scan a HDD, one of the first screens that comes up is the Supported System Identified screen. This screen displays all the features that DVR Examiner supports for this particular filesystem. If inaccessible recovery is supported, the “Inaccessible” icon (on the far left) will be highlighted in orange.

DVR Examiner supports two inaccessible recovery types. The first type, simply called “Inaccessible”, refers to the ability of DVR Examiner to locate large segments of deleted DVR video that the DVR no longer recognizes. For example, when a disk is reformatted or deleted, if no additional video is recorded, all the original video is largely intact but simply missing index entries. The second type, “Frame Level Inaccessible” refers to the ability of DVR Examiner to recover very small segments of video which may have been partially overwritten by newer video. This is a much more complex and complete recovery type – we’re often able to recover some video from weeks or months in the past that was never actually overwritten. Keep in mind that either recovery type will typically result in a slower scan process.

By recovering inaccessible video, DVR Examiner has helped solve countless cases by providing valuable information from the scene of the crime. You can try out this feature for yourself with a free 30-day trial of DVR Examiner.

Note: ETM Insights is a sponsored section of EvidenceMagazine.com

 
Next >






New Books

Bloodstain Pattern Analysis

Most forensic disciplines attempt to determine the “who” of a crime. But bloodstain pattern analysis focuses on the “what happened” part of a crime. This book is the third edition of Blood-stain Pattern Analysis. The authors explore the topic in depth, explaining what it is, how it is used, and the practical methodologies that are employed to achieve defensible results. It offers practical, common-sense advice and tips for both novices and professionals. www.crcpress.com

Read more...