Notifications
Clear all

DVR recovery WFS0.4

6 Posts
5 Users
0 Likes
4,907 Views
(@sansarmaa)
Posts: 22
Eminent Member
Topic starter
 

i have DVR from "HD iDVR". which i cant mount, first sector says WFS0.4. i tried hx-recovery, it shows many files with dates, but i dont have the license… im thinking switch the evidence hdd with clean hdd, record some sample file, and get the signature and carve. is there any other way??

 
Posted : 09/12/2016 4:13 pm
passcodeunlock
(@passcodeunlock)
Posts: 792
Prominent Member
 

I did a manual recovery of WFS0.4 with a simple hex editor under linux, since no software was able doing it.

 
Posted : 10/12/2016 2:12 pm
JaredDM
(@jareddm)
Posts: 118
Estimable Member
 

Many multi-channel DVR's can't be recovered with simple file carving because they fragment the various channels into a single stream. Even if you knew the signatures, you'd likely be recovering chunks of data from multiple cameras into a single file.

I've got a guy here I work with that specializes in just these cases. He actually has his own software he writes and modifies for each case. Let me know if you need help with it.

 
Posted : 11/12/2016 6:49 pm
(@forensics86)
Posts: 1
New Member
 

I am working on a case with this file system. Wondering if you could share that software @jareddm

 
Posted : 18/05/2022 5:27 pm
 fdd
(@fdd)
Posts: 2
New Member
 

@forensics86 check out this thread: removed link i.e: removed link

I'd like a open source driver for linux that suppor WFS0.4 filesystem but still not luck. The previous windows app works, but it's slow and it has a uncomfortable interface

 
Posted : 15/04/2023 5:34 pm
 fdd
(@fdd)
Posts: 2
New Member
 

well i can't post links 🤣 

just search "ICSEE FOR PC"

and then "Play video from icsee camera memory card."

 
Posted : 15/04/2023 5:36 pm
Share: