IT Forensics · Drones

Proving remote access to drone systems through forensic analysis – Providing forensic evidence of unauthorised access

Unauthorised remote access to a drone system can, in principle, be gained both via the radio link to the remote control and via an existing network or cloud connection.

Enquire without obligation

Forensic evidence of such access is based on a combination of connection logs, unusual control patterns and anomalies in the account data of the associated companion app.

Why LanCologne?

Since its foundation, LanCologne has specialised in professional IT forensics. Our staff have decades of experience in the field of information technology and assist companies, solicitors, private individuals and, on a regular basis, the courts in the technical investigation of complex digital matters.

The examination is, as a matter of principle, carried out exclusively on a forensic copy, a forensic image or a data source captured in a technically equivalent manner that preserves the integrity of the evidence. The original evidence remains unchanged and is stored in a manner that preserves its integrity.

Our services

We systematically check available connection, account and control data for any indications of unauthorised remote access and document any anomalies found in a way that allows for proper traceability.

Typical areas of application

•Evidence of unauthorised access to a drone

•Investigation into account takeovers involving companion apps

•Investigation into unusual flights not initiated by the pilot

•Supplementing incident response investigations

•Judicial and non-judicial expert reports

•Cooperation with law enforcement agencies on drone-related offences

This is how the investigation into unauthorised remote access works

Once the data has been backed up, connection, account and control data are systematically checked for anomalies that could indicate unauthorised access. These are compared with the authorised user’s known, expected usage pattern.

Why is evidence of unauthorised remote access relevant from a forensic perspective?

Unauthorised access could lead both to misuse of the drone itself and to access to stored footage and location data, some of which may be sensitive.

Furthermore, evidence of such access may exonerate the person who is actually entitled to the ticket if that person is wrongly attributed a particular flight.

Frequently Asked Questions

How is unauthorised access typically detected?+

Based on anomalies such as unknown device pairings, unusual login times or implausible flight patterns.

Can an attacker take complete remote control of a drone?+

This depends on the system in question and its security mechanisms, and is assessed on a case-by-case basis from a technical perspective.

Are account takeovers also checked via the Companion app?+

Yes, as a compromised account can often be the starting point for unauthorised remote access.

🔗 Related topics

Drone forensics Conducting a forensic analysis of the drone’s network connections Forensic analysis of user account and login details in drone apps Proving unauthorised drone use through forensic evidence Conducting a forensic investigation into the theft of drone data

LanCologne – IT Forensics Drones Cologne

Do you require a professional forensic investigation into „proving remote access to drone systems forensically"? LanCologne can assist you in securing digital evidence in a manner that stands up in court, as well as in the transparent analysis of relevant drone artefacts.

Get in touch now