NVR

An NVR stores streams that were already compressed and packetised by the camera itself, so the recorder's export function and file container format matter more than any analogue-to-digital conversion step. Examiners must also account for network configuration, since footage may be distributed across multiple recorders or cloud storage tied to individual cameras.

If drives are configured in RAID, pulling a single physical drive for imaging will not yield readable video, since the data is striped or mirrored across multiple disks. The full array, and ideally the controller configuration, needs to be preserved and imaged together, or acquisition should be done through the NVR's own export interface.

Individual IP cameras and the NVR itself may run on separate internal clocks that drift or are set to different time zones, so timestamps overlaid on footage from different cameras in the same system can disagree; examiners should verify and document each device's clock offset against a trusted reference.