IT Forensics · Car
Forensic analysis of Event Data Recorders (EDRs) – Systematic reconstruction of accident data
The Event Data Recorder, often referred to as an accident data recorder, briefly records vehicle parameters such as speed and braking behaviour in many modern vehicles in the event of an accident or a triggering event.
Access to this data, as well as its exact scope, varies considerably depending on the manufacturer and model; for this reason, at the start of every investigation, we check which data is actually accessible in each specific case and by what means it can be analysed.
Why LanCologne?
Since its foundation, LanCologne has specialised in professional IT forensics. Our staff have decades of experience in the field of information technology and assist companies, solicitors, private individuals and, on a regular basis, the courts in the technical investigation of complex digital matters.
The examination is, as a matter of principle, carried out exclusively on a forensic copy, a forensic image or a data source captured in a technically equivalent manner that preserves the integrity of the evidence. The original evidence remains unchanged and is stored in a manner that preserves its integrity.
Our services
We check the accessibility of existing Event Data Recorder data and use our established tools to assess what is technically accessible and analysable in each individual case.
Typical areas of application
This is how an EDR analysis works
Once the data has been backed up, we first check whether the stored Event Data Recorder data can be accessed, and if so, by what technical means. Accessible data is analysed using our tools, whilst any identifiable technical limitations relating to proprietary or inaccessible formats are documented transparently.
Why is EDR analysis relevant in a forensic context?
EDR data can provide important, technically objective information about the condition of the vehicle immediately prior to an accident, such as the speed at which it was travelling and any braking manoeuvres that were initiated.
As not all data sources are equally accessible, the actual scope of the analysis carried out is always documented transparently, rather than suggesting a supposedly complete picture.
Frequently Asked Questions
LanCologne – Vehicle IT Forensics, Cologne
Do you require a professional forensic investigation into the „forensic analysis of Event Data Recorders (EDRs)"? LanCologne can assist you with the court-admissible preservation of digital evidence and the transparent analysis of relevant vehicle artefacts.
Related to this topic
- Forensic analysis of infotainment system data – using the central vehicle control unit as a data source
- Forensic reconstruction of navigation data – Analysing saved routes and destinations
- Forensic analysis of paired mobile phone data – using devices connected via Bluetooth as a data source
- Forensic analysis of CAN bus data – using in-vehicle communication for forensic purposes