creating as new or completing an existing one
We think in data recovery and forensics is mandatory to manage all the possible devices from older to the newest, that’s why we suggest solutions for:
This division is only theoretical because many cases actually cross them:
U.A.V. (Unmanned Aerial Vehicles) – drones
Understanding the potential locations for data storage will allow one to plan the forensic examination and reduce the possibility of missing evidence.
Relevant data storage locations in a UAV include removable memory card (SD, Micro SD, etc.), fixed memory card, flash memory.
Drone data storage locations can vary considerably and, in some cases, data can also spread over multiple locations.
Some drones will capture media and store the original version on the drone, some others will have visible slots, which are designed to allow easy access and swapping of portable storage devices (memory cards); but some models will have hidden and potentially sealed portable storage devices (memory cards).
Car infotainment systems
Car infotainment systems keep logs on routes, calls, contacts, messages; unlike mobile phones these devices are not encrypted or protected so it is possible to read memory (HDD, Emmc or NAND) creating a dump of the content and then parse with an analysis software to check DB content and extract callbooks, routes etc..
Just like for drones and all IoT devices information are inside a NAND Flash chip or on a Emmc chip, the file system used may change according to brand and model (Bosch, Magneti Marelli etc..) and may go from FAT to QNX or other embedded file systems.
