Related Experiment Video
Updated: Jul 20, 2025
05:50
Measuring Light-Switching Behavior Using an Occupancy and Light Data Logger
Published on: January 16, 2020
5.9K
IoT forensics: Exploiting unexplored log records from the HIKVISION file system
Evangelos Dragonas1, Costas Lambrinoudakis1, Michael Kotsis2
1Department of Digital Systems, University of Piraeus, Attica, Greece.
Journal of Forensic Sciences
|August 1, 2023
Summary
This study analyzes HIKVISION CCTV log records, uncovering crucial evidence often missed by commercial forensic tools. A new Python utility aids digital forensic examiners in analyzing these valuable HIKVISION logs.
Area of Science:
- Digital Forensics
- Internet of Things (IoT) Security
Background:
- CCTV surveillance systems are ubiquitous IoT devices crucial for criminal investigations.
- Proprietary file systems in devices like HIKVISION hinder comprehensive digital forensic analysis.
- Previous research on HIKVISION focused on video recovery, neglecting log data.
Purpose of the Study:
- To revisit the HIKVISION file system, specifically examining its stored log records.
- To uncover the structure and meaning of HIKVISION log records for forensic value.
- To address the unexploited potential of HIKVISION log data in investigations.
Main Methods:
- In-depth analysis of the HIKVISION proprietary file system.
- Detailed examination of log record structures and content.
- Development of a Python utility for automated log analysis.
Main Results:
- The structure and meaning of HIKVISION log records have been thoroughly elucidated.
- Log records contain critical investigative information not currently exploited by commercial forensic software.
- A functional Python tool, the Hikvision Log Analyzer, was created to assist examiners.
Conclusions:
- HIKVISION log records represent a significant, underutilized source of digital evidence.
- The developed Hikvision Log Analyzer can enhance the efficiency and effectiveness of forensic investigations.
- Further exploitation of proprietary file system logs is recommended for digital forensics.
Related Concept Videos
02:28Leaky Scanning
5.2K
During most eukaryotic translation processes, the small 40S ribosome subunit scans an mRNA from its 5' end until it encounters the first start AUG codon. The large 60S ribosomal subunit then joins the smaller one to initiate protein synthesis. The location of the translation initiation is largely determined by the nucleotides near the start codon as there may be multiple translation initiation sites present on the mRNA. Marilyn Kozak discovered that the sequence RCCAUGG (where R...
5.2K
01:03IR Frequency Region: Fingerprint Region
940
IR spectra are divided into two main regions: the diagnostic region and the fingerprint region. The diagnostic region of the spectrum lies above 1500 cm−1. The absorptions resulting from single-bond vibrations of the N–H, C–H, and O–H stretch at higher wavenumbers and appear on the left side of the spectrum. The stretching absorptions of the C≡C and C≡N occur between 2100–2300 cm−1. In contrast, those arising from stretching absorptions of the...
940
01:09Infrared (IR) Spectroscopy: Overview
1.9K
When electromagnetic radiation passes through a material, atoms or molecules transition from a lower to a higher energy state by absorbing radiation corresponding to the energy difference between the two states. The absorption of infrared (IR) radiation causes transitions between vibrational energy levels in a molecule. Therefore, IR spectroscopy is a useful analytical tool for determining the molecular structure of molecules.
Different compounds display unique properties due to their...
Different compounds display unique properties due to their...
1.9K
01:09Censoring Survival Data
132
Survival analysis is a statistical method used to analyze time-to-event data, often employed in fields such as medicine, engineering, and social sciences. One of the key challenges in survival analysis is dealing with incomplete data, a phenomenon known as "censoring." Censoring occurs when the event of interest (such as death, relapse, or system failure) has not occurred for some individuals by the end of the study period or is otherwise unobservable, and it might have many different...
132
01:24Data Reporting and Recording
4.7K
Reporting and recording are crucial in data documentation. The timely, thorough, and accurate documentation of facts is essential when recording patient data. Failure to record findings during an assessment or interpretation of a problem will result in loss of information and make the patient document unreliable. The reader is left with general impressions if the information is not specific. A recording is documenting data of the individual's health information in a traceable, secure, and...
4.7K
01:06Legal Guidelines for Documentation
1.3K
The legal guidelines for nursing documentation are essential for ensuring accurate, professional, and ethical recording of patient care. The guidelines are discussed here:
1.3K