IT Forensics · Car

Forensic analysis of USB and multimedia devices in vehicles – Forensic backup of connected storage media and multimedia devices

Infotainment systems often log information about connected USB storage devices, such as playlists, connection times and, in some cases, the identifiers of the respective devices, regardless of whether these are still present in the vehicle.

Enquire without obligation

This data may be relevant in determining which external storage devices were connected to the vehicle at any given time.

Why LanCologne?

Since its foundation, LanCologne has specialised in professional IT forensics. Our staff have decades of experience in the field of information technology and assist companies, solicitors, private individuals and, on a regular basis, the courts in the technical investigation of complex digital matters.

The examination is, as a matter of principle, carried out exclusively on a forensic copy, a forensic image or a data source captured in a technically equivalent manner that preserves the integrity of the evidence. The original evidence remains unchanged and is stored in a manner that preserves its integrity.

Our services

We analyse the available connection logs for USB and multimedia devices from the infotainment system and record the device identifiers and periods of use.

Typical areas of application

•Detection of connected USB storage devices
•Clarification regarding the use of data storage media not belonging to the vehicle
•Adding vehicle usage profiles
•Investigation of data exchange via USB interfaces
•Judicial and non-judicial expert reports
•Cooperation with law enforcement agencies

How a USB/multimedia device analysis works

Once the infotainment system has been backed up, the available connection protocols for external storage media are extracted and organised chronologically.

Why is the analysis of USB and multimedia devices relevant in a forensic context?

Evidence of a connected storage medium may be relevant, even if the medium itself is no longer available for examination.

When combined with other data sources, this can help to clarify issues relating to data exchange or usage.

Frequently Asked Questions

Are all connected USB devices logged?+
The scope varies considerably depending on the infotainment system and is assessed on a case-by-case basis.
Can the contents of a USB-Stick that no longer exists be reconstructed?+
Not usually, but metadata such as file names or playlists may sometimes remain.
Are smartphones also included as multimedia devices?+
If connected via USB, yes, this is dealt with separately in the context of paired mobile phone data.

LanCologne – Vehicle IT Forensics, Cologne

Do you require a professional forensic investigation into the „forensic analysis of USB and multimedia devices in vehicles"? LanCologne can assist you in securing digital evidence to a standard that will stand up in court, as well as in the transparent analysis of relevant vehicle artefacts.

Get in touch now