DME Forensics Blog

Jimmy Schroering

Recent Posts

Moving Forward with DVR Examiner 2.0

October 23,2017  /  

DVR Examiner,  /   DVR Examiner Updates,  /   Forensic DVR Recovery,  /   DVR Forensics  /  

0 Comments

 

When we released DVR Examiner 2.0 this past July, we made a number of significant improvements to the program and user interface. However, we recognize these changes did not come without their challenges. I want to take a minute to break down the decisions we made and share what we are doing to address some of the challenges and concerns you have encountered.

Continue Reading →

DVR Examiner 2.0 is Now Available!

July 28,2017  /  

DVR Examiner,  /   DVR Examiner Releases,  /   News  /  

0 Comments
I’m so excited to share the latest generation of DVR Examiner with you. This is more than just another update – it’s a brand new framework designed to improve your experience and allow us to implement support for even more DVRs in less time. I’d like to thank all our users for your feedback and ideas since DVR Examiner 1.0 was launched a little over 3 years ago. We value and appreciate your support!

In 2.0, our team has worked hard to incorporate your feedback and implement new features that make DVR Examiner even more efficient and easier to use. We specifically focused on adding and improving features that have a direct effect on helping you find, review, organize, and export your videos of interest.

Continue Reading →

Growth in a Small Forensics Company - Going Full Time

May 31,2017  /  

Insider  /  

0 Comments

Thanks for coming back to learn more about how DME Forensics started! If you haven't already, I'd recommend reading my previous post ("Growth in a Small Forensics Company - The Beginning") to get caught up.

Continue Reading →

Growth in a Small Forensics Company - The Beginning

May 15,2017  /  

Insider  /  

0 Comments

DME Forensics is celebrating a birthday later this month - it'll be four years since we started operating full-time. I figured this would be a good time to take a look back at how we started and, more importantly, the successes and challenges that brought us to where we are today. There is a lot to share, so I'll be breaking this up into several posts in the near future.

Continue Reading →

Surveillance DVRs – Shut down or pull the plug?

April 4,2017  /  

DVR Forensics  /  

0 Comments

Ever since I’ve been involved in digital & multimedia evidence, the traditional computer forensics community has been engaged in an ongoing debate. When you arrive on scene to a running computer, do you pull the plug or do you conduct an orderly shutdown of the computer?

 

Continue Reading →

Does DVR Examiner support systems with RAID?

May 3,2016  /  

DVR Examiner,  /   DVR Forensics  /  

0 Comments

You are recovering video from a DVR system with multiple hard drives and the manual tells you that the system uses RAID - can DVR Examiner help you?

Before attempting the recovery, you should investigate a little further to determine the best course of action.

Continue Reading →

Analysis of Hikvision Date/Time

February 25,2016  /  

Forensic DVR Recovery,  /   DVR Forensics  /  

0 Comments
 

When it comes to adding support for new DVRs into DVR Examiner, or recovering video manually for a laboratory case, understanding the proprietary metadata of a given DVR filesystem is critical. 

While I will be posting a series of posts over the next few months on understanding the proprietary structure of DVR filesystems, I wanted to share some information about Hikvision systems that was recently requested. 

Most DVR filesystems store key metadata in 2 different places: the index(es) and at the beginning of each frame. In the case of the Hikvision-based systems, the index information is stored at the end of each data block, and provides a date time range per channel for the clips within that block. In this metadata, the date time is stored as a traditional Unix epoch timestamp (seconds since 1970). However, the date/time metadata at the frame level is stored in a very different manner. 

Continue Reading →

What forensic video analysis system should I buy?

April 10,2015  /  

Technical Posts,  /   Forensic DVR Recovery  /  

0 Comments

Two questions I am often asked are “What type of forensic video analysis system should I buy?” and “I have “X” system and I’m really comfortable with it, should I get another one or is there something better out there?”. I’ve answered this enough times that I figured I’d actually put it down in a blog post. As you’ll see, my goal in this post isn’t to recommend one specific system over another, but to present some things for you to consider when looking to acquire a new system.

Continue Reading →

Video Playback Stuck in VLC?

March 6,2015  /  

Technical Posts,  /   Forensic DVR Recovery,  /   DVR Forensics  /  

0 Comments

Occasionally, you will encounter video clips that only appear to display the first frame when played in VLC. When this occurs the progress bar continues to move but no additional video frames appear to be displayed. “Scrubbing” across the video will sometimes allow you to move to a certain position beyond the first frame, but even this doesn’t always work. We recently had a DVR Examiner user ask us about this. They were reviewing AVI files exported from DVR Examiner and some of them played fine in VLC and some simply froze at the first frame.

Continue Reading →

Recent Posts