When a DVR connected to a CCTV system is powered off there is a chance that the process of powering it back on will cause the video data to be lost. Worn physical parts, dead internal batteries, or even poor software engineering can be to blame. The best method for protecting the video data on a DVR is to image the hard drive.
This two-day workshop provides the technical background and guidance for imaging and analyzing seized DVRs. Students will gain an understanding of the proper procedures for imaging hard drives from DVRs, the tools needed, analysis techniques for hard drives, and additional troubleshooting steps in the event that the DVR fails. Hands-on exercises will be used to assist in the understanding of the overall process