The invention discloses and embedded security and protection equipment data extracting method and belongs to the field of data restoration. The method comprises the following steps of analyzing a disk ext3 partitioning condition, analyzing a starting address, size and a boot sector address of each partition, analyzing a detail table in a database file search.db of the partitions and reading data records in the table, acquiring normal file information, marking a corresponding data file in a fat32 partition, reading lost data and coverage data, reading the normal data, the lost data and the coverage data records, and then extracting corresponding data according to different classifications with a combination of a video file format structure. By the use of the method, whether the disk data is an Inyan Viewse monitoring video data format can be quickly determined; and effective video data files such as normal data files, lost data files and coverage data files in the disk data can be extracted.