I have been tasked with attempting to recover deleted video from two Honeywell DVRs (an HRHD+ and an HRXD).
Brief circumstances are that the suspect had previous legitimate access to the installed devices and attempts to check the recorded video for the time of the offence by security personnel indicated that video for the relevant time had been deleted.
I have still to finish acquiring images of the drives (bad sectors on top of everything else - sometimes they just make these jobs too easy) but my research so far indicates that the video is stored in a compressed encrypted format which throws out my first thoughts of carving by file headers and footers. What I have been able to preview so far fails to reveal a readable file structure.
At this point I would appreciate
* any pointers
* messages of sympathy as I watch months of my life disappear pointlessly
* suggestions
as to how to retrieve the deleted video. If anybody has any contacts within Honeywell who might be able to help this too would be appreciated, unfortunately my initial calls to their UK Tech support met with the equivalent of blank stares and the honest admission that they had no idea how to do this.
Wouter van Dongen once did research into a similar scenario - the recorder make was Samsung but the setup sounds pretty similar. If I recall correctly, his research was published in Elsevier's Digital Investigation magazine.
(indeed, it was
That might be helpful?
Please contact Honeywell Video Technical Suppport on 0844 8000 235
BioBrain
I have been contacted directly by your parent company and am waiting further info.
Thanks
Bryan