[Case Study] Detailed Steps for Extracting Data from Burned & Watered Hard Drive of DVR System


[News] SalvationDATA was Awarded Another New Patent from USPTO


[Software Update] VIP V1.0.15.7996 New Version Release for Better DVR Forensics

[News] SalvationDATA is participating in National Procuratorate Technology and Equipment Exhibition

We are participating in PTEE2017! Get a hands-on experience of our popular forensic products at our booth.


[Software Promotion] DVR Forensics Solution Summer Giveaway

We are providing the whole DVR forensics solution on Summer Giveaway promotion--If you are forensic examiner, law enforcement investigator, forensic specialist, you are on our donating list. Contact us now!


[Technical Insights] DVR Forensics: How to Retrieve Video Clips Without Transcoding

Editor's note: In this issue, data experts from SalvationDATA will introduce a video retrieval method that does not require transcoding, which is good news for field investigators, because the method can dramatically improve case handling efficiency by saving the time needed for transcoding. And it is compatible with various video formats like .avi, .dav, .mkv, .bsr, .ts, .264, .lfv, .dat etc.


[Technical Insights] DVR Forensics-Ways to Reach Surveillance Host

In this issue, experts from SalvationDATA will introduce several ways to reach surveillance host, which could help improve the efficiency of evidentiary data extraction during field investigation.


[Software Update] Forensic Data Recovery Tool DRS V17.7.3.268 Available with More Capabilities

We're excited to announce today that new version of Forensic Data Recovery Tool DRS is available for update. Update to the latest version now to explore its new capabilities. Some of the new features added include: 1. Muti-tasking is now online! Supporting up to 4 DRS process running simultaneously. 2. New imaging input and output format: E01, AFF. 3. New HASH calculation tool in tool box, supporting MD5, SHA1, SHA256 algorithm for files or strings. 4. Multiple bug fix, system optimizing.


[Technical Article] Recover Data from Encrypted External Hard Drive (USB Port)

This issue covers the forth technique application case study conducted by SalvationDATA technicians — data recovery through the opening of a WD 1TB external hard drive. The hard drive involved in this case study was badly scratched and double-secured (hard drive firmware encryption + USB firmware encryption), which makes this case study a typical one. Recovering data from this hard drive is quite different and much more difficult, because normal hard drives can generate image file and access data after changing the magnetic head, but this one cannot. To recover data from the double-secured hard drive with USB port, we needed to have its circuit board changed twice and obtain the key for decrypting the hard drive through initiating WDunlocker by simulating data needed for decryption. No data can be recovered from the image file of said hard drive unless the hard drive is decrypted.


[Technical Article] SalvationDATA Helps Reveal Truth of a Fatal Crash

Driver of a Honda died after a head-on collision with a truck and, with no camera around that remote area, automobile data recorder of the Honda is the key for identifying the cause and liability of the accident. When police retrieved data from the recorder, however, the last-minute record is missing. What’s the truth then?


[News] SalvationDATA at Techno Security & Digital Forensics Conference!

It needs no reaffirmation that Techno Security & Digital Forensics Conference is one of the most important resources for corporate network security professionals, federal, state and local law enforcement digital forensic specialists, and cyber security industry leaders from around the world. Attending the event not only helps professionals gain deeper insight into digital forensics, but also enables companies to network with resources around the globe. And we’re sure that SalvationDATA is one of the resources that can help you out of your forensic conundrums at Techno Security & Digital Forensics Conference.


[Technical Insights] Find Who's Behind Unsanctioned Flight of UAV

Recent years have seen a marked shift of Unmanned Aerial Vehicle (UAV) from an expensive and professional production equipment to a consumer product. And, along with this shift comes more unsanctioned flights which have major impacts on the safety of traditional aircrafts and human life. Unsanctioned flights of four UAVs occurred at Chengdu Shuangliu International Airport at the night of April 21st, for example, caused alternate landing of 58 flights at Xi’an, Chongqing, Guiyang, and Mianyang airports, 4 flight returns, and the stranding of more than 10,000 passsengers. Prior to this event, on the 14th, 17th, and 18th, unauthorized flights of UAV also disturbed the normal arrangement of Shuangliu airport when they caused alternate landing and delay of flights.


[Technical Article] Mac Log File Structure and Extraction Analysis

When it comes to computer forensics, the capability to extract and analyse Mac log is very essential. Since Mac log file cannot be recognized on window system, its structure needs to be parsed so that we can proceed further analysis. In this issue, data recovery experts from the Key Laboratory of Sichuan Province introduce the structure of Mac log files, and how to use the SalvationDATA (DF)Digital Forensics System for its analysis and extraction.