Abstract : Digital video recorders (DVRs) for closed-circuit television (CCTV) commonly have an in-built capability to export stored video files to optical storage media. In the event that a DVR is damaged, its contents cannot be easily exported. This renders the forensically-sound recovery of proprietary-formatted video files with their timestamps from a DVR hard disk an expensive and challenging exercise. This paper presents and validates a technique that enables digital forensic practitioners to carve video files with timestamps without referring to the DVR hard disk filesystem.
https://hal.inria.fr/hal-01460629
Contributor : Hal Ifip <>
Submitted on : Tuesday, February 7, 2017 - 5:28:17 PM Last modification on : Wednesday, November 25, 2020 - 5:06:03 PM Long-term archiving on: : Monday, May 8, 2017 - 3:05:41 PM
Aswami Ariffin, Jill Slay, Kim-Kwang Choo. Data Recovery from Proprietary Formatted Cctv Hard Disks. 9th International Conference on Digital Forensics (DF), Jan 2013, Orlando, FL, United States. pp.213-223, ⟨10.1007/978-3-642-41148-9_15⟩. ⟨hal-01460629⟩