The introduction of DVR Examiner 2.0 brought big changes to our user interface and workflow flexibility. While some of these changes brought their own challenges, we have been hard at work fixing bugs and updating the program.
Brad Barkhurst, a Forensic Specialist Supervisor, recently reviewed his experience with using DVR Examiner in fire investigations.
When we released DVR Examiner 2.0 this past July, we made a number of significant improvements to the program and user interface. However, we recognize these changes did not come without their challenges. I want to take a minute to break down the decisions we made and share what we are doing to address some of the challenges and concerns you have encountered.
Before I start talking about technical information and processes, I would like to propose a question. What does traditional computer forensics mean to you? If you can’t seem to find a definite answer, you are not the only one. Many times, when I mention my career in a conversation, the next question follows with “so what does that mean?”
In the last post, we explored some avenues to get a 10,000-foot view of your potential expert – how to match words with deeds from web pages, CVs and participation in the forensic community. Today we are going to dive a bit deeper into how to assess your potential expert’s technical skills by looking at certifications.
When arriving on the scene and finding a DVR, your main task will be to get usable video evidence from the device. But what is the best way to do this? There are a few ways to export video from a DVR, and each can be a viable path to your evidence. Each method has its strengths.
As most of you who have had interactions with surveillance DVRs have probably experienced, DVRs are a pain in the butt. Ignoring the physical conditions of where the DVR is located (the attic/drop ceiling, next to the grease trap in the kitchen, under 5 inches of dust), the DVRs themselves can be really finicky, really slow, and they all behave a little differently. While we have designed DVR Examiner to work with the DVR hard drive directly, bypassing the need for the DVR itself, it may still sometimes be necessary for you to work with the DVR itself to export video or determine the DVR settings.
Ever since I’ve been involved in digital & multimedia evidence, the traditional computer forensics community has been engaged in an ongoing debate. When you arrive on scene to a running computer, do you pull the plug or do you conduct an orderly shutdown of the computer?
We have all heard the saying, “not all that glitters is gold” and when it comes to selecting and retaining a forensic expert, you want the real deal, not just a shiny pretty rock! Everything we discuss in this series is relevant when you are hiring any type of expert – forensic or otherwise. You should thoroughly vet any expert you wish to retain – and that includes us as well.
You are recovering video from a DVR system with multiple hard drives and the manual tells you that the system uses RAID - can DVR Examiner help you?
Before attempting the recovery, you should investigate a little further to determine the best course of action.