IT Forensics · Drones

Forensic analysis of push notifications and app logs – using the Companion app’s system messages for forensic purposes

Drone apps frequently generate system messages and push notifications whilst in operation – for example, regarding warnings, status changes or completed flights – some of which are logged permanently.

Enquire without obligation

These logs can provide additional temporal clues and shed light on what information was actually displayed to the user at a particular point in time.

Why LanCologne?

Since its foundation, LanCologne has specialised in professional IT forensics. Our staff have decades of experience in the field of information technology and assist companies, solicitors, private individuals and, on a regular basis, the courts in the technical investigation of complex digital matters.

The examination is, as a matter of principle, carried out exclusively on a forensic copy, a forensic image or a data source captured in a technically equivalent manner that preserves the integrity of the evidence. The original evidence remains unchanged and is stored in a manner that preserves its integrity.

Our services

We systematically analyse available push notifications and app logs, and place the messages they contain in their chronological context within the investigation.

Typical areas of application

•Reconstruction of warning messages displayed to the user
•Chronological classification of status messages and events
•Confirmation of acknowledgement of specific system warnings
•Updating the overall timeline of an incident
•Judicial and non-judicial expert reports
•Incident response for drone incidents

This is how a push notification analysis works

Once the end device has been secured, existing notification and app logs are extracted and organised chronologically. Relevant alerts and status messages are highlighted separately and cross-referenced with other data sources.

Why is the analysis of push notifications relevant from a forensic perspective?

Proof that a user actually saw a particular warning can be decisive in determining whether they deliberately disregarded safety instructions.

Logged system messages also frequently provide precise timestamps, which can be used to verify other chronological reconstructions.

Frequently Asked Questions

Are notifications stored permanently?+
The scope and retention period vary depending on the app and operating system, and are assessed on a case-by-case basis.
Can it be proven that a warning has actually been read?+
Not usually, but the mere display of a warning can be documented.
Are system-level operating system logs also included?+
Where relevant for forensic purposes and where available, general system logs from the end device are also used as supplementary evidence.

LanCologne – IT Forensics Drones Cologne

Do you require a professional forensic investigation into „the forensic analysis of push notifications and app logs"? LanCologne can assist you in securing digital evidence in a manner that stands up in court, as well as in the transparent analysis of relevant drone artefacts.

Get in touch now