This overview brings together all the questions and answers relating to vehicle IT forensics at LanCologne – from control units, driver assistance systems and electric vehicles, through to connectivity and specialised vehicles, right through to theft, physical security and legally compliant project management. Click on a category to view the relevant questions.
Electric and hybrid vehicles
- Forensic analysis of EV battery management data – the forensic use of battery management system logs in electric vehicles
- Forensic analysis of EV charging history – Forensic reconstruction of electric vehicle charging sessions
- Forensic analysis of charging point data/charging infrastructure – Forensic use of operator-side charging infrastructure data
- Forensic analysis of hybrid vehicle powertrain data – Forensic documentation of the interaction between the internal combustion engine and the electric motor
Driver assistance systems and autonomous driving
- Forensic analysis of ADAS data (advanced driver-assistance systems) – using assistance system logs for forensic purposes
- Forensic analysis of autonomous driving functions and level data – forensic documentation of the degree of automation and system status
- Forensic analysis of lane-keeping assist logs – forensic documentation of steering interventions by the lane-keeping system
- Forensic analysis of adaptive cruise control data – Forensic documentation of adaptive cruise control
- Forensic analysis of emergency braking assistant trigger data – Forensic documentation of automatic emergency braking events
- Forensic analysis of parking aid sensor data – the forensic use of ultrasonic parking aid sensors
- Forensic analysis of night-vision camera data – the forensic use of infrared and night-vision systems
- Forensic analysis of head-up display data – Forensic use of windscreen display systems
- Forensic analysis of driver fatigue detection systems – Forensic documentation of driver fatigue warning systems
- Forensic analysis of alcohol interlock data – Forensic documentation of alcohol immobilisers
Connectivity, apps and services
- Forensic analysis of vehicle WLAN/hotspot usage data – Forensic documentation of in-vehicle internet connections
- Forensic analysis of voice control system data – Forensic use of in-car voice assistants
- Forensic analysis of vehicle app connection data – using manufacturer apps and vehicle links for forensic purposes
- Forensic analysis of vehicle cloud account data – Forensic use of manufacturer-provided user accounts
- Proving remote access to vehicle functions through forensic analysis – Documenting the remote control of vehicle functions through forensic analysis
- Forensic analysis of USB and multimedia devices in vehicles – Forensic backup of connected storage media and multimedia devices
- Forensic analysis of toll system/transponder data – Using electronic toll collection data for forensic purposes
- Forensic analysis of fleet management telematics – Using operational fleet management systems for forensic purposes
- Forensic analysis of car hire usage data – forensic reconstruction of car hire usage profiles
- Forensic analysis of car-sharing usage data – using short-term hire platforms for forensic purposes
- Forensic analysis of ride-hailing app data – using ride-hailing services for forensic purposes
- Forensic analysis of insurance telematics/black boxes – the forensic use of telematics boxes for motor insurance
- Forensic analysis of digital car keys (smartphone-as-key) – the forensic use of smartphone-based vehicle keys
- Forensic analysis of in-vehicle payment systems – Using in-car payment functions for forensic purposes
- Forensic analysis of eSIM and mobile communications module data – utilising built-in mobile connections for forensic purposes
- Forensic analysis of eCall emergency call system data – Forensic documentation of the automatic emergency call system
- Forensic analysis of remote diagnostic data – using manufacturer-provided remote diagnostics for forensic purposes
- Forensic analysis of fleet tracking data for commercial vehicles – using location tracking of large commercial vehicle fleets for forensic purposes
- Forensic analysis of geofencing in fleet vehicles – Forensic documentation of virtual geofence boundaries
Special-purpose vehicles and commercial use
- Forensic analysis of weight and load sensor data from lorries – the forensic use of axle load and load sensors
- Motorcycle Forensics: Forensic Analysis of Digital Traces – The Forensic Use of Motorcycle Electronic Systems
- Forensic analysis of motorhome and caravan systems – The forensic use of electronic systems in motorhomes
- Forensic analysis of agricultural vehicles (GPS steering systems) – The forensic use of satellite-based steering systems in agriculture
- Forensic analysis of construction machinery telematics – using construction machinery telematics systems for forensic purposes
- Forensic analysis of taximeter data – the forensic use of fare meters in the taxi industry
- Forensic analysis of dual-control driving school vehicles – forensic documentation of dual-pedal systems
- Forensic investigation of the use of leased and company cars – Forensic documentation of evidence of use for leased and company cars
- Forensic examination of a commercial vehicle
- Differences between passenger car, commercial vehicle and special-purpose vehicle forensics
Theft, tampering and misuse
- Conducting a forensic mileage verification (odometer tampering) – Forensically checking the plausibility of the mileage
- Proving speedometer tampering through forensic analysis – Technical methods for detecting speedometer fraud
- Locating stolen vehicles – Using digital traces to locate stolen vehicles through forensic analysis
- Forensic analysis of vehicle tracking systems (trackers) – Forensic preservation and analysis of retrofitted GPS trackers
- Forensic analysis of vehicle alarm system logs – forensic documentation of alarm triggers and security system events
- Forensic investigation of VIN cloning – forensically detecting the transfer of third-party vehicle identification numbers
- Conducting forensic checks for digital traces on grey-market vehicles – Conducting forensic checks on parallel-imported vehicles to ensure consistency
- Forensic examination of stolen vehicle parts – Forensic investigation into the origin of dismantled vehicle components
- Proving remote engine shutdown through forensic analysis – Documenting remote engine shutdown through forensic analysis
- Forensic analysis of biometric driver identification – Forensic use of in-vehicle biometric recognition systems
- Secure the vehicle whilst the anti-theft alarm is activated
- Securing a vehicle with a tampered or deactivated tracker
Physical security and special cases
- Documenting vehicle searches and physical inspections for forensic purposes – Providing forensic support for systematic physical vehicle searches
- Securing a written record of a vehicle involved in an accident that is a write-off
- On-site vehicle security in road traffic
- Vehicle security at surveyors’ offices and garages
- Backing up several of a vehicle’s control units in parallel
- Secure vehicles with removed or damaged control units
- Securing rental cars and demonstration vehicles for forensic analysis
- Forensically securing a vehicle with a foreign manufacturer’s identification number
- Secure a vehicle with a completely flat battery
- Securing a vehicle with an encrypted infotainment system
- Physically securing a vehicle for forensic analysis following water damage
- Carrying out a physical forensic examination of a vehicle following fire damage
- Backing up a vehicle with outdated or incompatible diagnostic software
- Performing a forensic backup of a vehicle with active cloud connectivity
- Performing a forensic backup of a vehicle with multiple authorised drivers
- Forensically secure the vehicle in its as-delivered condition
Order processing, legal matters and quality assurance
- Vehicle security as part of an internal company investigation
- Vehicle security checks as part of an insurance survey
- Seizure of a vehicle as part of legal proceedings
- X-Ways Forensics for raw data analysis of vehicle memory units
- Limitations of analysing proprietary vehicle control unit formats
- Chain of custody for vehicle evidence
- Hash value generation and integrity checks for vehicle data
- Write protection in forensic vehicle data backup
- Data protection aspects of vehicle forensics
- Personal rights in the analysis of vehicle data
- Forensic assessment of insurance claims arising from vehicle incidents
- Preparing expert reports in the field of automotive forensics
- Collaboration with motor vehicle surveyors
- Cooperation with law enforcement agencies in relation to vehicle offences
- Reporting and Documentation in Automotive Forensics
- Automated versus manual analysis of vehicle data
- Quality assurance and the dual-control principle in automotive forensics
- Temporal synchronisation of multiple vehicle data sources
- Combined analysis of vehicle and mobile phone data
- Emergency response for businesses in the event of vehicle incidents
- Communicating the limitations of automotive forensics clearly
- Preparing for vehicle forensics on behalf of clients
- Why cross-tool verification is important for vehicle data
- Procedure and costs of a vehicle forensic investigation
- The future of automotive forensics: connected and autonomous vehicles
Vehicle data, control units and systems
- Forensic analysis of Event Data Recorders (EDRs) – Systematic reconstruction of accident data
- Forensic analysis of infotainment system data – using the central vehicle control unit as a data source
- Forensic reconstruction of navigation data – Analysing saved routes and destinations
- Forensic analysis of paired mobile phone data – using devices connected via Bluetooth as a data source
- Forensic analysis of CAN bus data – using in-vehicle communication for forensic purposes
- Forensic examination of vehicle electronic control units (ECUs) – Forensic analysis of electronic control units
- Forensic analysis of tachographs – reconstructing driving and rest periods for commercial vehicles
- Forensic analysis of vehicle telematics units – Forensic use of permanently fitted communication modules
- Forensic analysis of keyless entry system data – the forensic use of keyless entry systems
- Forensic analysis of immobiliser data – Using anti-theft systems for forensic purposes
- Forensic analysis of the Tyre Pressure Monitoring System (TPMS) – Using tyre sensor data for forensic purposes
- Forensic analysis of camera systems (reversing camera/360°) – the forensic use of footage from in-vehicle cameras
- Forensic analysis of dashcam footage – forensically securing and analysing retrofitted video recordings
- Forensic analysis of OBD-II diagnostic logs – Using the standardised vehicle diagnostic interface for forensic purposes
- Carrying out a forensic analysis of the fault memory – systematically analysing stored fault codes using forensic methods
- Forensic analysis of the Update software history – Forensic documentation of installed software versions and Update history
- Forensic analysis of OTA-Update logs – Forensic investigation of over-the-air updates
- Forensically reconstructing a vehicle’s route – using position and movement history for forensic purposes
- Forensic analysis of driving profiles and driving behaviour – Forensic documentation of driving style and driving behaviour
- Forensic reconstruction of speed data – Forensic documentation of dangerous speeds
- Forensic analysis of braking data – Forensic documentation of braking behaviour and braking system logs
- Forensic analysis of steering angle data – Forensic documentation of steering movements
- Forensic analysis of seat occupancy sensor data – Forensic documentation of vehicle seat occupancy status
- Forensic analysis of seatbelt buckle sensor data – Forensic documentation of seatbelt fastening status
- Forensic analysis of airbag deployment data – Forensic documentation of restraint system deployment data
- Forensic analysis of collision sensor data – Forensic documentation of impact sensors
- Forensic reconstruction of pre-crash data – forensic documentation of the vehicle’s condition prior to a collision
- Forensic analysis of post-crash data – Forensic documentation of a vehicle’s condition following a collision
- Forensically analysing a vehicle’s history and previous owner details – forensically reconstructing its usage and ownership history
- Forensic examination of maintenance and service history – Forensic analysis of documented maintenance procedures
- Forensic verification of the Vehicle Identification Number (FIN/VIN) – Forensic examination of the authenticity and consistency of the Vehicle Identification Number
Other questions
- Forensic analysis of in-vehicle streaming and app usage – forensic analysis of media and app usage data in the infotainment system
- Forensic analysis of vehicle electrical system voltage logs – Forensic documentation of vehicle electrical system data
- Forensic analysis of software rollback history – Forensic documentation of rollbacks to earlier software versions
- Forensic investigation of CAN bus attacks – Forensically detecting tampering with the vehicle data bus
- Forensic investigation of vehicle cyber-security incidents – Forensic analysis of digital attacks on vehicle systems
- Forensic investigation of keyless relay attacks – Forensic analysis of signal amplification attacks on keyless systems
- Forensic investigation of GPS spoofing in vehicle navigation systems – Forensically detecting falsified satellite signals
- Conducting forensic investigations into accidents involving company vehicles – carrying out forensic investigations into accidents involving vehicles used for business purposes
- Forensic investigation into the misuse of company vehicles – Forensic detection of unauthorised use of company vehicles
- Forensic investigation into the private use of company vehicles – forensically documenting the distinction between business and private journeys
- Assessing the admissibility of black box data in court – providing forensic support for the classification of vehicle data under the law of evidence
- Forensic reconstruction of vehicle theft – Forensically piecing together the digital traces of a vehicle theft
- Forensic investigation of hit-and-run accidents – Forensically securing digital evidence in hit-and-run cases
- Forensic investigation of a vehicle fire – Forensically securing digital evidence following a vehicle fire
- Forensic investigation of water damage to a vehicle – Forensically securing digital evidence following water damage
- Forensic examination of seized vehicles – Professional forensic analysis of seized vehicles
- Conducting forensic investigations into several vehicles within a fleet – Coordinating comprehensive forensic investigations across entire vehicle fleets
- Forensic preservation of a vehicle with a damaged electrical system
- Forensic examination of an electric vehicle
- Performing a forensic backup of a vehicle without a key or PIN
- Backing up a vehicle at risk of data loss in an emergency
- Why LanCologne relies on generic standard tools in automotive forensics
- Belkasoft X for vehicle forensics: a detailed look