IT Forensics · Drones

Forensic analysis of the remote control’s firmware – forensic examination of the control unit’s software version

The firmware version installed on a remote control can provide information about the technical status of the device at a given point in time and is particularly relevant where certain functions were only available from a specific firmware version onwards.

Enquire without obligation

Subsequent, unauthorised modifications to the firmware – for example, to circumvent factory-set restrictions – may also be of forensic relevance and will be examined as part of the investigation.

Why LanCologne?

Since its foundation, LanCologne has specialised in professional IT forensics. Our staff have decades of experience in the field of information technology and assist companies, solicitors, private individuals and, on a regular basis, the courts in the technical investigation of complex digital matters.

The examination is, as a matter of principle, carried out exclusively on a forensic copy, a forensic image or a data source captured in a technically equivalent manner that preserves the integrity of the evidence. The original evidence remains unchanged and is stored in a manner that preserves its integrity.

Our services

We check the firmware version installed on a remote control and the documented change history, and assess their relevance to the subject under investigation.

Typical areas of application

•Determining the technical status of a device at a specific point in time
•Investigation into unauthorised firmware modifications
•Evidence of circumvention of factory-set functional restrictions
•Supplementing investigations into technically tampered systems
•Judicial and non-judicial expert reports
•Cooperation with aviation authorities in the event of drone incidents

How a firmware analysis is carried out

Once the backup has been completed, the installed firmware version is read and compared with known, official version numbers. Any indications of subsequent, unofficial modifications are checked and documented separately.

Why is firmware analysis relevant in a forensic context?

Certain functions or security mechanisms may only be available or active from a specific firmware version onwards, which may be crucial when assessing an incident.

Furthermore, a subsequent, unauthorised modification to the firmware may in itself be an indication of a deliberate attempt to circumvent security or restriction mechanisms.

Frequently Asked Questions

Is unofficial firmware always recognisable?+
In many cases, yes, based on discrepancies with known official version numbers; however, 100 per cent detection cannot be guaranteed.
Are firmware Update logs also analysed?+
If available, yes, in order to track the device’s technical development over time.
Can modified firmware remove restrictions?+
In some systems, this is technically possible, and is considered in forensic investigations as a possible cause of unusual flight behaviour.

LanCologne – IT Forensics Drones Cologne

Do you require a professional forensic investigation into „forensic analysis of remote control firmware"? LanCologne can assist you with the collection of digital evidence in a manner that stands up in court, as well as the transparent analysis of relevant drone artefacts.

Get in touch now