DME Forensics Blog

DVR Examiner DVR Implementation Process

May 22,2017 /

DVR Examiner /



So, you’ve encountered a device that DVR Examiner does not support. You may be wondering, “What are the next steps in getting the DVR supported?” This post will take you from the point you encounter the unsupported system to the time it’s released in DVR Examiner.

The first step starts with you!  When the software tries to detect the filesystem of a DVR, you may receive the message “Undetected filesystem.”

Undetected Filesystem (002).png

This message indicates the we have not encountered the filesystem found on your DVR. At this time, we ask that you submit a profiler. A profiler grabs a small amount of information from the drive to assist us in researching the filesystem.  Please also include photos of the DVR you are working on to help us better locate one ourselves. Photos of the front, back, inside and bottom will help us identify the DVR. Once we have received the profiler, we will review and determine if this filesystem can be supported.

Profiler Capture Information (002).png

The next step in the process is for us to research the DVR. In the research process, we attempt to purchase the same or similar DVR to the one you encountered. We aren’t always able to find the exact DVR due to it being discontinued or the manufacturer no longer in business. If we can’t locate the exact DVR, we will look for a similar DVR or at least a different channel variant.


Once the purchased DVR has been received, we will run some controlled tests. These tests will give us information on how the filesystem saves the video data, as well as how the indexing is formatted. When we have completed these controlled test recordings, the filesystem will move to the reverse engineering phase. This will be where we use the controlled recordings to determine how the filesystem works. We will look at the indexing, exporting, and the formatting process for the system. A few key things we will look for in the drive are channel number, start (date and time), end (date and time). Based off these key identifiers, we will proceed further into the reverse engineering process.

After the filesystem has been reverse engineered, the information that was found will be passed onto the software developers. They will take this information and code it into the software. Once the coding has been completed, the filesystem will go through multiple rigorous tests. When the testing has been completed, the filesystem will await the scheduled release date. The implementation process can take a decent amount of time based on availability of the DVR, complexity of the filesystem, and number of times the filesystem has been requested. Once a filesystem has been released, we will inform you of the new functionality so that you can test the DVR you have with the new software updates!

Recent Posts