IT Forensics · Car

Proving remote access to vehicle functions through forensic analysis – Documenting the remote control of vehicle functions through forensic analysis

Modern vehicles allow remote access to certain functions – such as door locking, location tracking, the horn and climate control – via an app or web portal, with each action usually being logged.

Enquire without obligation

These logs may be relevant in determining whether and when a particular vehicle function was triggered remotely, and from which account or device this was done.

Why LanCologne?

Since its foundation, LanCologne has specialised in professional IT forensics. Our staff have decades of experience in the field of information technology and assist companies, solicitors, private individuals and, on a regular basis, the courts in the technical investigation of complex digital matters.

The examination is, as a matter of principle, carried out exclusively on a forensic copy, a forensic image or a data source captured in a technically equivalent manner that preserves the integrity of the evidence. The original evidence remains unchanged and is stored in a manner that preserves its integrity.

Our services

We analyse available logs relating to remote access to vehicle functions and document the time, the function carried out and, where available, the account that triggered the action in a manner that is forensically verifiable.

Typical areas of application

•Evidence of remote access to door or motor functions
•Investigation of allegations of theft or misuse
•Investigation into unauthorised use of an account
•Supplement to vehicle cloud account analyses
•Judicial and non-judicial expert reports
•Incident response for vehicle-related cyber incidents

This is how a remote access analysis is carried out

Subject to the appropriate authorisation, available logs relating to remotely controlled vehicle functions are saved, organised chronologically and reconciled with other account and device data.

Why is remote access analysis relevant from a forensic perspective?

Evidence of remote access can be crucial in determining whether a particular vehicle function was activated by the authorised user or by a third party.

Particularly in theft investigations, determining the time at which remote access took place can provide important clues.

Frequently Asked Questions

Are all remote access sessions logged?+
For most systems, yes; the exact scope is assessed on a case-by-case basis.
Is it possible to determine which device triggered a remote access request?+
In many cases, yes, provided that the relevant metadata is included in the log.
How is this log data accessed?+
Only with the account holder’s authorisation or on the basis of a valid legal basis.

LanCologne – Vehicle IT Forensics, Cologne

Do you require a professional forensic investigation into „forensically proving remote access to vehicle functions"? LanCologne can assist you in securing digital evidence in a manner that stands up in court, as well as in the transparent analysis of relevant vehicle artefacts.

Get in touch now