IT Forensics · Drones

Conducting forensic analysis of encrypted drone storage media – assessing access to protected data sets

Some drone models or their associated companion apps offer the option to encrypt stored data, which means that access rights must be clarified in advance when carrying out a forensic backup.

Enquire without obligation

In such cases, without the relevant access credentials, only the encrypted raw data set can initially be backed up, whilst any analysis of the content depends on a key becoming available at a later date.

Why LanCologne?

Since its foundation, LanCologne has specialised in professional IT forensics. Our staff have decades of experience in the field of information technology and assist companies, solicitors, private individuals and, on a regular basis, the courts in the technical investigation of complex digital matters.

The examination is, as a matter of principle, carried out exclusively on a forensic copy, a forensic image or a data source captured in a technically equivalent manner that preserves the integrity of the evidence. The original evidence remains unchanged and is stored in a manner that preserves its integrity.

Our services

We secure encrypted drone storage media in a manner that is forensically traceable and examine the technically and legally permissible options for further access to the protected data.

Typical areas of application

•Forensic backup of encrypted storage media
•Review of available means of accessing protected data
•Documentation of existing technical access limitations
•Cooperation with authorised parties to provide access details
•Judicial and non-judicial expert reports
•Cooperation with law enforcement agencies on drone-related offences

This is how the processing of encrypted storage media works

Once the encrypted raw data set has been secured, a check is carried out to determine whether access to the decrypted data is possible and, if so, through which legally permissible means. If no access details are available, this is transparently documented as a limitation of the investigation.

Why is the handling of encrypted storage media relevant from a forensic perspective?

Even without immediate access to the content, simply backing up the encrypted data set can be important in order to preserve it for later analysis once a key becomes available.

Transparent communication regarding existing technical limitations is essential, particularly in the case of encryption, so as not to raise unrealistic expectations regarding the scope of the investigation.

Frequently Asked Questions

Do all drones encrypt their stored data?+
No, this is more of an exception and depends on the specific model and its configuration.
What happens if there are no login details available?+
In this case, it is usually only possible to back up the encrypted raw data set and document that it is present.
Can encryption be bypassed retrospectively?+
This depends on the encryption method used and, where legally and technically feasible, is assessed on a case-by-case basis.

LanCologne – IT Forensics Drones Cologne

Do you require a professional forensic investigation into „the forensic handling of encrypted drone storage media"? LanCologne can assist you with the legally admissible preservation of digital evidence and the transparent analysis of relevant drone artefacts.

Get in touch now