IT Forensics · Car

Forensic analysis of the Update software history – Forensic documentation of installed software versions and Update history

Vehicle control units from many manufacturers log the software versions installed and, in some cases, the date of previous software updates, whether carried out by a garage or as an over-the-air update.

Enquire without obligation

This information may be relevant in determining which software version was actually active at the time of an incident and whether a Update might have affected the vehicle’s behaviour.

Why LanCologne?

Since its foundation, LanCologne has specialised in professional IT forensics. Our staff have decades of experience in the field of information technology and assist companies, solicitors, private individuals and, on a regular basis, the courts in the technical investigation of complex digital matters.

The examination is, as a matter of principle, carried out exclusively on a forensic copy, a forensic image or a data source captured in a technically equivalent manner that preserves the integrity of the evidence. The original evidence remains unchanged and is stored in a manner that preserves its integrity.

Our services

We document the available information on the software versions installed and the Update timings of the relevant control units, and place this within the chronological sequence of the investigation.

Typical areas of application

•Clarification of the software version that was active at the time of the incident
•Investigation into the potential effects of a Update on vehicle behaviour
•Evidence of security updates that have been carried out or not carried out
•Support with product recalls and product liability issues
•Judicial and non-judicial expert reports
•Collaboration with manufacturers and garages

This is how a Software-Update analysis is carried out

Once the relevant control units have been read out, the available information on software versions and Update times is documented and cross-checked against other data sources, such as the fault memory history.

Why is the Update software analysis relevant from a forensic perspective?

Proving a specific software version can be crucial if a subsequent Update update has altered the vehicle’s previous behaviour.

The documented Update history can also play an important role in the event of product recalls due to known software faults.

Frequently Asked Questions

Are all Software Updates logged?+
The scope varies depending on the manufacturer and control unit, and is assessed on a case-by-case basis.
Is it possible to determine retrospectively which software version was active at a specific point in time?+
In many cases, yes, provided that the relevant log data is available and can still be accessed.
Is the analysis different for over-the-air Updates?+
Yes, additional logs from the OTA-Update infrastructure are also included here.

LanCologne – Vehicle IT Forensics, Cologne

Do you require a professional forensic investigation into „forensic tracing of Software-Update history"? LanCologne can assist you in securing digital evidence to a standard acceptable in court, as well as in the traceable analysis of relevant vehicle artefacts.

Get in touch now