Video extraction from damaged Hard Drive
Extracting the contents of a seized hard disk to detect useful elements for investigation purposes.
The Case
Event recostruction following the explosion of a gunshot in front of a video-monitored business.
Examined Evidence
Evaluation of video material retrieved from four video surveillance cameras..
Techniques adopted
Low-level recovery procedure of the retrieved materials and application of image enhancement through specific software.
Findings
A low-level recovery procedure was performed on a damaged hard disk. Once the material contained within the hard disk was recovered, all the necessary procedures were carried out to ensure the preservation of the original data and prevent its alteration. In order to detect useful elements, video footage was analyzed, focusing on only 4 of the 16 cameras installed in the business. From the analysis of the video material, it was possible to extrapolate the crucial moments when the crime was perpetrated and then reconstruct the dynamics.
