GPR System Logs
The main function of the log is to keep a record of files recovered. For the forensic option, it provides details of exactly how the data has been reconstructed which ensures that such evidence could be used in court.
For the demo, the log provides a very good indication of which files have been found, and will be recovered by the licenced version.
The log has many columns, and an entry for each file/video recovered
# The number of the file recovered
Filesize Bytes in the file
Full file name The full name and path for the file
Filename Just the file name
ext Type of file, normally mp4, jpg etc
Verify If OK, the file has been verified as valid
Horz This is the horizontal resolution of the video
Vert This is the vertical resolution of the video
Frames This is the frame rate
Frags This indicates the number of fragments the file is made up of. On the forensic version, if the number is clicked on, a full report of each data run is displayed
Start sector The first sector of the file
Create date The date the file was created
Modify date The date the file was modified
For the forensic version there are three more fields, for GPS and hash value
Longitude degrees:minutes:seconds East or West
Latitude degrees:minutes:seconds North or South
MD5 Hash On the forensic version, the MD5 hash value is saved.
Search for sector
This is a function to determine which file(s) a sector has been used in. In theory a sector should only be used in single file, but if the chip has had many deleted, it is possible fragments may be shown in multiple files. This a forensics only option.
Export
The displayed log can always be exported to a .CSV file. This can be useful for logging in a forensic case, or sometimes to send to CnW Recovery for analysis.
The forensic package will include the MD5 hash value and also the fragmentation information. The fragments are stored as pairs of fields following the main data. The first field is the sector number, and the second field is the run length, in sectors.