IT Forensics · Car

Forensic analysis of remote diagnostic data – using manufacturer-provided remote diagnostics for forensic purposes

Many manufacturers offer remote diagnostics functions that allow a vehicle’s technical condition to be checked remotely and, in some cases, automatically transmitted to garages or the manufacturer’s servers.

Enquire without obligation

This data may be relevant for forensically reconstructing the vehicle’s condition as documented at the time of a remote diagnosis and for cross-referencing it with other data sources.

Why LanCologne?

Since its foundation, LanCologne has specialised in professional IT forensics. Our staff have decades of experience in the field of information technology and assist companies, solicitors, private individuals and, on a regular basis, the courts in the technical investigation of complex digital matters.

The examination is, as a matter of principle, carried out exclusively on a forensic copy, a forensic image or a data source captured in a technically equivalent manner that preserves the integrity of the evidence. The original evidence remains unchanged and is stored in a manner that preserves its integrity.

Our services

Subject to the necessary authorisation, we analyse available remote diagnostic reports and cross-check documented vehicle conditions against locally stored ECU data.

Typical areas of application

•Evidence of a vehicle’s condition as documented at a specific point in time
•Supplement to the fault memory and software Update analysis
•Clarification of warranty and product liability issues
•Investigation of technical anomalies prior to an incident
•Judicial and non-judicial expert reports
•Collaboration with manufacturers and garages

How remote diagnostic data analysis works

Subject to the appropriate authorisation, available remote diagnostic logs are retrieved, analysed and compared with data stored locally in the vehicle.

Why is the analysis of remote diagnostic data relevant in a forensic context?

Remote diagnostic data may still be available even if local vehicle data has already been overwritten or deleted.

Reconciling remote and local data improves the reliability of the reconstructed vehicle history.

Frequently Asked Questions

How is remote diagnostic data accessed?+
Only with the vehicle owner’s authorisation or on the basis of a valid legal basis.
Are remote diagnostics carried out at every visit to the garage?+
Not necessarily; it depends on the workshop in question and the system used.
Can remote diagnostic data be tampered with?+
This is taken into account as part of the investigation through plausibility and integrity checks.

🔗 Related topics

LanCologne – Vehicle IT Forensics, Cologne

Do you require a professional forensic investigation into the „forensic analysis of remote diagnostic data"? LanCologne can assist you in securing digital evidence to a standard that will stand up in court, as well as in the transparent analysis of relevant vehicle data.

Get in touch now