±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 33982
New Yesterday: 0 Visitors: 150

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

RSS Feed Widget

±Latest Webinars

HikVision DVR

If you require the services of a computer forensics or data recovery firm please post details of your requirements here. Other members will then be able to contact you with a quote for their services [NOTE: Forensic Focus assumes no liability whatsoever for the results of services provided].
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Go to page Previous  1, 2, 3  Next 
  

Re: HikVision DVR

Post Posted: Thu Apr 26, 2018 11:32 am

I have limited experience with recovering video from DVRs. That said, when I used both DVR Examiner (trial) and HX Recovery for one case, only DVR Examiner was able to recognize the file system and show me the video files ready for examination.

If you can afford DVR Examiner, it appears to be money well-spent. The founder of the company that makes DVR Examiner, Jimmy Schroering, is active on the IACIS listserv. He's always willing to answer questions you may have about the product or even DVR forensics in general.  

Tacobreath
Member
 
 
  

Re: HikVision DVR

Post Posted: Thu Apr 26, 2018 11:42 am

- ares99
Thanks for the info. Do you think I will be able to get more from HX Recovery than what DVR Examiner found?

Hard to say, in at least another occasion it worked fine where DVR Examiner failed:
www.forensicfocus.com/...c/t=16393/

but as you most probably well know each software may work exceptionally well in one case and do nothing of use on another one.

jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 

jaclaz
Senior Member
 
 
  

Re: HikVision DVR

Post Posted: Thu Apr 26, 2018 11:44 am

Write to your personal mail. We wrote the software, you can check what dates you can reсovery.  

soft512byte
Newbie
 
 
  

Re: HikVision DVR

Post Posted: Thu Apr 26, 2018 12:01 pm

Make an image of it, analyze with different solutions and report back what gave you the best results.
_________________
Passcodeunlock - mobile/tablet screen unlocking
passcodeunlock.com 

passcodeunlock
Senior Member
 
 
  

Re: HikVision DVR

Post Posted: Fri Apr 27, 2018 12:29 am

- ares99
I need to recover data from a Hik Vision DVR (Model DS-7216HGHI-SH).

Data is from April 4th, 2018. Apparently system was set to start overwriting after ten days. We were not able to copy the hard drive until 4/18/18.

What is the possibility of getting any usable video from the HD from that time frame? We have run a trial copy of DVR Examiner on it. It only shows 5 clips but they say they are 00 minutes long and we can’t see what they are or which camera they are from. The local forensic tech we used to copy the drive said he would not have any ability to go beyond what DVR examiner shows. The drive is 2 TB in size.

Any suggestions for this? I tried downloading HX-Recovery but my anti-vurus software flagged it and wouldn't let me download.

According to DVR Examiner, the rest of the info is:

Filesystem Name: HIK_264
Filesystem Version: 2018.01.22
DVR Examiner Version: 2.2.0
Database Version: 3/20/2018

Type: SegmentedRaw
Bytes Per Sector: 512
Sector Count: 3907029168
Total Size: 1863 GB


Maybe specialists from 512Byte Company will help you. Here are their contacts: soft.512byte.ua/produc...overy.html  

tito
Member
 
 
  

Re: HikVision DVR

Post Posted: Fri Apr 27, 2018 1:48 am

- tito

Maybe specialists from 512Byte Company will help you. Here are their contacts: soft.512byte.ua/produc...overy.html


A specialist from 512Byte Company has already posted/intervened before you:

- soft512byte
Write to your personal mail. We wrote the software, you can check what dates you can reсovery.


jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 

jaclaz
Senior Member
 
 
  

Re: HikVision DVR

Post Posted: Fri Apr 27, 2018 3:02 pm

- ares99
Data is from April 4th, 2018. Apparently system was set to start overwriting after ten days. We were not able to copy the hard drive until 4/18/18.

What is the possibility of getting any usable video from the HD from that time frame?


So that's approximately 4 days of overwriting then. I'd say the odds of recovery for that time frame are pretty low. I'm sure my DVR guy could recover video from the HDD, but no one can recover overwritten data...no one!
_________________
Lead Data Recovery Tech at Data Medics® - www.data-medics.com 

JaredDM
Senior Member
 
 

Page 2 of 3
Go to page Previous  1, 2, 3  Next