HIKVision CCTV DVR ...
 
Notifications
Clear all

HIKVision CCTV DVR Recovery

9 Posts
7 Users
0 Likes
2,340 Views
(@renfantino)
Posts: 9
Active Member
Topic starter
 

I need help extracting data from a Swann CCTV (Model srdvr-84500t) DVR system. Per the Investigator the owner reformatted the drive after the incident in an attempt to erase the footage. I have imaged the 2TB drive and it appears to be an HIKVision file system.

I used DVR Examiner but it does not recover any deleted videos. Any suggestions on what I could use to recover the deleted videos? I primarily work with mobile devices so this fairly new to me. I have attempted to use TestDisk but I'm not sure which partition option to select since I know none of them fit. I know there is HX-Recovery available but don't want to spend the $680 to get the full version.

Does anyone have experience with HIKVision systems? Any suggestions on how to carve the deleted video files?

 
Posted : 14/12/2016 1:28 am
JaredDM
(@jareddm)
Posts: 118
Estimable Member
 

Our DVR guy could probably handle it. He has his own custom software he's written and can even modify it for specific cases. But, you'd probably be looking at around $600 for the recovery.

How good is your internet connection? Feel like uploading the image for him to take a peek?

 
Posted : 14/12/2016 4:42 am
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

I have attempted to use TestDisk but I'm not sure which partition option to select since I know none of them fit. I know there is HX-Recovery available but don't want to spend the $680 to get the full version.

I don't think that TESTDISK could be anyway of use, AFAICU those things use not even any "normal" filesystem, see
http//www.shs-conferences.org/articles/shsconf/pdf/2015/01/shsconf_icitce2014_02010.pdf
(the actual article is BTW - IMNSHO - pointless and worthless, besides being written in a terrible English, but at least it evidences the "general idea" behind those).

jaclaz

 
Posted : 14/12/2016 6:43 pm
passcodeunlock
(@passcodeunlock)
Posts: 792
Prominent Member
 

I did successful recoveries of this, manual work with hex editor and some scripting.

I don't want to advertise here the service or the price of it, I sent you a PM with details.

 
Posted : 14/12/2016 10:13 pm
(@renfantino)
Posts: 9
Active Member
Topic starter
 

Thank you all for your suggestions. I have been able to extract videos using FFmpeg but have ran into another issue. The image was already divided into smaller parts so I selected a few of the parts for FFmpeg. For each part FFmpeg creates one video file and it contains random video clips from different days and camera channels. Is there anyway to automatically clips these videos into the correct segments?

 
Posted : 15/12/2016 4:30 am
(@aditya5)
Posts: 11
Active Member
 

Please check your PM.

 
Posted : 15/12/2016 8:49 am
passcodeunlock
(@passcodeunlock)
Posts: 792
Prominent Member
 

Thank you all for your suggestions. I have been able to extract videos using FFmpeg but have ran into another issue. The image was already divided into smaller parts so I selected a few of the parts for FFmpeg. For each part FFmpeg creates one video file and it contains random video clips from different days and camera channels. Is there anyway to automatically clips these videos into the correct segments?

This is why I wrote that some scripting would be also needed, but I presume you didn't read your PM.

 
Posted : 15/12/2016 1:30 pm
(@dmitri)
Posts: 12
Active Member
 

I need help extracting data from a Swann CCTV (Model srdvr-84500t) DVR system … it appears to be an HIKVision file system.

I noticed this topic only now, but if necessary, we'll be happy to help.

We develop our own custom recovery software for CCTV DVRs and should be able to help remotely with HikVision and Swann units.
The result is the video files with date/time, playable on any modern computer.

Please feel free to PM or email me.

 
Posted : 28/12/2016 11:19 am
NeGrusti
(@negrusti)
Posts: 18
Active Member
 

Recovering raw video from HikVision recorders is not difficult.
Extracting timestamps and channel information is complicated, but possible.
Dmitry, can you please confirm if your solution extracts timestamps/channels?
As far as I know, DVR Examiner cannot do that yet.

 
Posted : 29/12/2016 10:58 pm
Share: