IT Forensics · Car

Carrying out a forensic analysis of the fault memory – systematically analysing stored fault codes using forensic methods

Modern control units store detected fault conditions in one or more fault memory units, often including details of the frequency, environmental conditions and approximate time of occurrence.

Enquire without obligation

A systematic analysis of these error codes can provide insight into technical problems that occurred around the same time as an incident.

Why LanCologne?

Since its foundation, LanCologne has specialised in professional IT forensics. Our staff have decades of experience in the field of information technology and assist companies, solicitors, private individuals and, on a regular basis, the courts in the technical investigation of complex digital matters.

The examination is, as a matter of principle, carried out exclusively on a forensic copy, a forensic image or a data source captured in a technically equivalent manner that preserves the integrity of the evidence. The original evidence remains unchanged and is stored in a manner that preserves its integrity.

Our services

We systematically analyse the contents of the fault memory, place the identified fault codes in chronological order and document any possible links to the incident under investigation.

Typical areas of application

Investigation into the technical causes of a vehicle incident
Detection of recurring or chronic fault conditions
Support with warranty and product liability issues
Supplementing accident reconstructions with technical findings
Judicial and non-judicial expert reports
Collaboration with workshops and experts

This is how a fault memory analysis is carried out

Once the relevant control units have been read out, any stored fault codes are systematically documented and, where possible, placed in the context of the incident in terms of both timing and content.

Why is the analysis of the fault log forensically relevant?

Fault codes can provide reliable technical evidence as to whether a fault was already present before an incident occurred or only arose as a result of it.

The absence of expected fault codes can also be forensically relevant and allow conclusions to be drawn about the vehicle’s actual condition.

Frequently Asked Questions

Are fault codes stored permanently?+
This varies depending on the control unit and the manufacturer; some codes are automatically deleted after a certain number of fault-free cycles.
Can a deleted fault memory be detected using forensic methods?+
In some cases, accompanying log data may indicate that the error memory has been manually cleared.
Is an analysis of the fault memory alone sufficient to determine the cause of an accident?+
Not usually; it is regarded as one component amongst others, working in conjunction with other data sources.

LanCologne – Vehicle IT Forensics, Cologne

Do you require a professional forensic investigation into „forensic analysis of error log data"? LanCologne can assist you in securing digital evidence in a manner that stands up in court, as well as in the transparent analysis of relevant vehicle data.

Get in touch now