IT Forensics · Drones

Forensic backup of drones’ internal storage – Forensic analysis of permanently installed storage media

In addition to, or instead of, a removable SD card, many drone models have built-in internal storage, the forensic backup of which often requires direct access to the drone’s electronics.

Enquire without obligation

The method of accessing this internal memory varies considerably depending on the model, ranging from a standard data transfer via a cable connection to direct access to the built-in memory chip.

Why LanCologne?

Since its foundation, LanCologne has specialised in professional IT forensics. Our staff have decades of experience in the field of information technology and assist companies, solicitors, private individuals and, on a regular basis, the courts in the technical investigation of complex digital matters.

The examination is, as a matter of principle, carried out exclusively on a forensic copy, a forensic image or a data source captured in a technically equivalent manner that preserves the integrity of the evidence. The original evidence remains unchanged and is stored in a manner that preserves its integrity.

Our services

We back up the internal memory of drones using the gentlest technical method available in each case and then systematically analyse the backed-up data.

Typical areas of application

Forensic backup of permanently installed storage media
Investigation of drones without a removable memory card
Data recovery for physically damaged devices
Addition to the analysis of formatted memory cards
Judicial and non-judicial expert reports
Incident response for drone incidents

This is how a backup of the internal storage is carried out

First, we assess which method of accessing the internal memory of the respective drone is technically feasible and the least invasive. The data is then backed up using the selected method, followed by an integrity check using hash values.

Why is backing up the internal storage relevant from a forensic perspective?

In models without a removable memory card, the internal memory is often the only available source of flight, photo and video data, which is why it is particularly important to back it up properly.

An improper access attempt may cause irreversible damage to the internal memory; for this reason, the appropriate access method is carefully checked in advance.

Frequently Asked Questions

Is it always possible to access the internal memory?+
In most cases, yes, but the exact amount of work involved depends heavily on the specific model and its physical condition.
Does the drone need to be opened for this?+
In some cases, particularly when regular data access via a cable connection is not possible.
What happens if a device is physically damaged?+
In such cases, specialised data recovery procedures are used, similar to those employed for damaged memory cards.

LanCologne – IT Forensics Drones Cologne

Do you require a professional forensic investigation into „forensically securing the internal memory of drones"? LanCologne can assist you with the legally admissible securing of digital evidence and the transparent analysis of relevant drone artefacts.

Get in touch now