DVR forensics - .IF...
 
Notifications
Clear all

DVR forensics - .IFS files

2 Posts
2 Users
0 Likes
962 Views
(@jhevosoj)
Posts: 1
New Member
Topic starter
 

Hello everyone!

So, I came across a DVR which had a faulty HDD. The fault prevented viewing the videos through the manufacturer's own software. I managed to extract data from the HDD but ran into a problem afterwards all of the files within HDD are reckognized as .ifs files (most likely the images/videos are somehow packed within these files). So far I haven't been able to find any real information/programs which can extract the actual image data from these files. Here's a link to a same kind of topic

http//www.forensicfocus.com/Forums/viewtopic/t=5045/highlight=dvr/

Has anyone dealt with these .ifs files before? Also, all suggestions are appreciated!

 
Posted : 15/06/2012 5:11 pm
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

Hello everyone!
….

Also, all suggestions are appreciated!

Several hints were given here
http//tech.groups.yahoo.com/group/win4n6/message/5631

The general idea is however to see if the maker of the actual DVR provides specific "playback" software.

It seems that there are as many (undocumented) .ifs file formats than stars in the sky …. (

A good resource (now dead, but thanks to the Wayback Machine still and forever alive ) is given
http//web.archive.org/web/20100526033507/http//www.darienrushsecurity.co.nz/download.htm

The general idea is sketched here
http//www.wikihow.com/%22Backup%22-Video-from-a-Q-See-Security-Camera-System
but YMMV, depending on brand/make and software they make available.

IF the data is not encrypted/coded/whatever through some proprietary codec/whatever, in the previously mentioned tech.groups.yahoo thread a couple apps worth a try are listed
http//www.headbands.com/gspot/
http//sourceforge.net/projects/defraser/

jaclaz

 
Posted : 15/06/2012 7:10 pm
Share: