A Brighton shop break-in, and a DVR that kept on taping
At the point at which the insurer requested footage of the incident, the DVR had been looping for nine days. The drive was imaged, and the index was read and used to recover the incident window from the sectors of the disk that the DVR had not yet overwritten. The video was exported twice (once for people viewing it and again for the insurer's claim).