Samsung DVR Model SDR-B85300n

Write to private e-mail. I can try to help.

Hello,

I have a Samsung DVR Model SDR-B85300n I'm trying to recover video's files from this unit. It's pass code protected. I mounted the HDD through a W/B and looked at it using Encase 8.06.
Encase only see it as unused disk space.
On the table listed in case it shows;
1. Hard Links
2. INode Table
3. Volume BitMap
4. Inode Bitmap
5. Block Descriptors
6. Group Descriptors
7. Resize Area
8. Journal Area
9. Lost+Found
10. Extent Blocks
11. Unallocated Clusters

Any suggestions on how to recover videos files

Thanks

Have you tried DVR Examiner from DMEforensics?
According to their website it says that they can bypass passwords and stuff )
https://dmeforensics.com/dvr-examiner/

"DVR Examiner is a software solution for the recovery of video and metadata from DVR surveillance systems in a forensically sound manner. This “game changing” software can help save your team time and money when recovering video evidence by recovering data directly from the DVR, bypassing passwords to recover video, including deleted video, from a suspect DVR."

DVRs don't have a standard file system, so Encase won't be able to do much with it. DVR Examiner, as mentioned, can help with a lot of cases.

If it doesn't work, my DVR guy can probably cook up a custom solution with his own software he wrote.

Either way, DVRs are always a custom job.

Either way, DVRs are always a custom job.

Unless they are already supported by an existing tool.

There are at least two known existing tools specifically intended for DVR recovery, hxdvr and the mentioned DVR Examiner, see also
https://www.forensicfocus.com/Forums/viewtopic/t=16568/
besides the related one from the software house that member soft512byte
https://www.forensicfocus.com/Your_Account/profile=34150/
represents.

Maybe it is worth to try them before calling it a "custom job".

jaclaz

Post the first 16 bytes of the HDD header, so we would know what we are against at least ?!