Advertisement
Guest User

Untitled

a guest
May 17th, 2017
95
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.65 KB | None | 0 0
  1. I contacted $vendor about the drives from the DVRs - They remoted into a system we'd set up with the software from the OEM - was able to see the drives, and the files, but playback failed.They used the most recent version of the software and it was indicated by them that the video files were corrupted.
  2.  
  3. They also suggested two older versions that didn't see the files at all, but detected the drives. And that these may be AVI files
  4.  
  5. Vendor suggested searching online for recovery for $brand DVRs - which indicated they may be "DV4" files.
  6.  
  7. The drive themselves seem accessible (indicating there's no file system corruption) - they're a linux/ext2 format and they were visible from a third party, read only file system loader from windows. I used the read only software to copy a subset of the files for analysis.
  8.  
  9. There are a set of files with similar names - one file with a I extension, which appears to be a password protected SQL file and a set of files with the extension .stream.
  10.  
  11. I attempted a preliminary analysis of a set of .stream files I'd copied out to my laptop with "trid" - a forensics/analysis software used to identify file types. It identified the video files as mp3s (which is an audio, not a video format). I also attempted to play the individual copied out files with VLC - a common video player that supports most common video formats. I did so both with the .stream extension and with a renamed extension.
  12.  
  13. Most file recovery services tend to focus on hardware or filesystem failure - I was unable to find any cases/literature of forensic recovery from these machines - so I'm unable to recommend a method or possible vendor for recovery of these. .
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement