Well, the footage after it was switched to PAL isn't of much importance. I did an export of the data prior to that to a USB device.
See, I will give you the complete story. We arrived and the DVR was on PAL mode. I told the manager I would be back tomorrow to pull the HDD for it. Later that evening someone logged in with admin and attempted to purge the system. I can see it clearly in the logs. Unfortunately there is no camera that points to where the system is located. My main issue was trying to figure out how the system was converted to PAL so I had some additional evidence of tampering. The purge failed because he didn't know how to do it correctly, and I have footage of the initial break in. I was just trying to reverse engineer how it was switched to PAL and if it could have happened without human intervention. I know the system didn't log in with Admin on it's own and try to purge the data though. lol.
My main objective was to figure out how to switch that system from PAL to NTSC so I could add that to my report. It's obvious the employee wanted to destroy the data of the break in. It just felt incomplete without understanding how the system was changed from NTSC to PAL.
Thanks again!