本文就一款“九安”品牌硬盘录像机的数据恢复案例,详细介绍了检材特点、检验思路和检验过程。使用常规检验方法对检材进行检验,需要花费大量的人力和时间,且效果不佳。通过分析视频监控录像的二进制数据,研究该品牌硬盘录像机的技术资料,最后结合利用该产品的备份数据软件,摸索出恢复“九安”品牌监控录像数据的新方法。通过与常规方法对比,结果证明新方法检验效率更高、检出数据更精炼,从而为该类检材建立了一种新的检验方法。

An electronic forensic case, in which video data was deleted from its video surveillance device named “Juanvision”, was presented for us to recover the video data. Some traditional methods were tried but did not work. Through searching and analyzing the documents developed by the manufacturer of that video surveillance, we found the software named Diskbackup. The data-recovery method was established by analyzing the binary encoding of the video time and utilizing Diskbackup. The deleted data was successfully recovered, and the method established was proven to be more efficient, accurate.