Exploring the Feasibility of Embedded DVR Systems Data Recovery under the Perspective of Forensic Science
Objective The multimedia(video/audio)data in the embedded systems with digital video recorder(DVR)often act as vital pieces of evidence in the field of digital forensics.However,in the practice of forensic appraisal,it is common that the data in the DVR are inaccessible due to accidental deletion,malicious deletion or damage,which undoubtedly makes the digital forensics process more difficult.Methods Combined with the practice of forensic appraisal,taking the inaccessible DVR video files stored in MicroSD card as an example,the research on DVR data recovery based on the file allocation table(FAT)32 file system and H.264 related file formats was carried out.Results The video files recovered through these two methods explored in this paper can be accessed normally,and the automatic reconstruction of DOS boot record(DBR)can also be achieved by running script files.Conclusion In this paper,we effectively recovered DVR systems data of FAT32 file system and H.264 format.In addition,we also realized the automatic reconstruction of DBR by running script files,which improved the efficiency of forensic examination.The research of relevant examination techniques has significant theoretical and practical value for the research on forensic examination of embedded DVR systems.
DVR data recoveryFAT32 file systemH.264-related file formatDBRmaster boot record(MBR)
国家科技期刊平台
NSTL
万方数据
