IT Forensics · Drones

Conducting a forensic analysis of the drone’s firmware – carrying out a forensic check of the aircraft’s software version

The firmware version installed on a drone plays a key role in determining its range of functions and active security mechanisms, and may therefore be of direct relevance when assessing an incident.

Enquire without obligation

Retrospective, unofficial firmware modifications – such as those designed to circumvent speed or altitude restrictions – may also be of forensic relevance and will be examined as part of the investigation.

Why LanCologne?

Since its foundation, LanCologne has specialised in professional IT forensics. Our staff have decades of experience in the field of information technology and assist companies, solicitors, private individuals and, on a regular basis, the courts in the technical investigation of complex digital matters.

The examination is, as a matter of principle, carried out exclusively on a forensic copy, a forensic image or a data source captured in a technically equivalent manner that preserves the integrity of the evidence. The original evidence remains unchanged and is stored in a manner that preserves its integrity.

Our services

We check the firmware version installed on a drone and assess any documented modifications in terms of their relevance to the subject under investigation.

Typical areas of application

•Determination of the technical condition of an aircraft at a specific point in time
•Investigation into unofficial firmware modifications
•Evidence of circumvention of factory-set restrictions
•Supplementing investigations into technically tampered systems
•Judicial and non-judicial expert reports
•The legal basis for drone forensics under aviation law

This is how a firmware analysis of the drone is carried out

Once the backup has been completed, the installed firmware version is read and compared with known, official version numbers. Any indications of unofficial modifications are checked separately and their potential impact on flight behaviour is documented.

Why is the analysis of the drone’s firmware relevant from a forensic perspective?

Modified firmware can override factory-set security and restriction mechanisms, which may be crucial when assessing an incident.

The standard firmware version may also be relevant, as certain features and bug fixes were only available from a specific version onwards.

Frequently Asked Questions

Is modified firmware always detectable?+
In many cases, yes, based on discrepancies with known official version numbers; however, 100 per cent detection cannot be guaranteed.
Can firmware modifications affect flight performance?+
Yes, with some systems this can, for example, remove speed or altitude restrictions.
Is the Update history also analysed?+
If available, yes, in order to track the drone’s technical development over time.

LanCologne – IT Forensics Drones Cologne

Do you require a professional forensic investigation into „forensic analysis of drone firmware"? LanCologne can assist you with the collection of digital evidence in a manner that stands up in court, as well as the transparent analysis of relevant drone artefacts.

Get in touch now