Notifications
Clear all

Drone Forensics

20 Posts
8 Users
0 Likes
2,116 Views
RolfGutmann
(@rolfgutmann)
Posts: 1185
Noble Member
Topic starter
 

Taking-over of drones is well documented but what evidence to collect from a catched drone to enforce law against his owner is problematic. The phenomena itself is ultrafast and often results in coming too late after getting alerted. Not all the time a pilot was observed from the public or can be attributed to his home address or identified as a person. Already we had a case as a drone was pre-GPS-programmed and no person was found at the go-home-position - but the video clip was live streamed to an unknown MAC-address with Samsung vendor-part. The owner kind of risked to lose the drone with GoPro which hints to crime/professional.

Maybe in other countries the phenomena is bigger and therefore more experience as here.

Please post your best practices with drone forensics for sharing. Thank you.

 
Posted : 09/07/2017 2:16 am
MDCR
 MDCR
(@mdcr)
Posts: 376
Reputable Member
 

Haven't touched the subject myself, but i've seen more than one company that do drones
https://gcn.com/articles/2016/09/07/drone-forensics.aspx

Maby some of them are here on the forum?

 
Posted : 09/07/2017 2:31 pm
RolfGutmann
(@rolfgutmann)
Posts: 1185
Noble Member
Topic starter
 

A few days ago at Interpol-World 2017 was

http//www.apolloshield.com/

 
Posted : 09/07/2017 4:05 pm
(@johpe)
Posts: 6
Active Member
 

The recently released version 7.4 of XRY supports extraction of data from drones
https://www.msab.com/2017/07/05/released-today-xec-express-xry-v7-4/

 
Posted : 09/07/2017 10:15 pm
RolfGutmann
(@rolfgutmann)
Posts: 1185
Noble Member
Topic starter
 

Our focus is on the pilot. First to identify, second to locate. Having visual identified what drone model is flying we decide what tool to shut down, direct to go-home etc. The danger are not
falling drones and at first we do not protect privacy of individuals. Prison protection is not our
responsability too. But find the pilot and understand his intention. Sometimes in pre-crime
analysis its not obvious which object is under reconnaissance.

A new approach we trial is visualising the RF connection from pilot to drone. By getting the emitting RF frequency of the drone we search for a transmitting unit with same frequency sub-band. Connecting the two results the visual connection line in Google Earth fly-over-mode (actually not StreetView capable).

 
Posted : 10/07/2017 12:05 pm
RolfGutmann
(@rolfgutmann)
Posts: 1185
Noble Member
Topic starter
 

Either the drone is selfflying by pre-programmed or with a pilot. If second the RC device and used frequency out of old-school model building or new WiFi-based 2,4GHz preferred. The MAC address of the RC unit is an indicator but may can be spoofed.

Who did in-lab investigate a spoofed RC unit already?

 
Posted : 11/07/2017 9:44 pm
(@randomaccess)
Posts: 385
Reputable Member
 

David Kovar has done quite a bit of research into drone stuff
He just launched his new website recently, and posted a collection of his presentations here

 
Posted : 12/07/2017 8:27 am
RolfGutmann
(@rolfgutmann)
Posts: 1185
Noble Member
Topic starter
 

Thank you!

 
Posted : 12/07/2017 2:10 pm
hcso1510
(@hcso1510)
Posts: 303
Reputable Member
 

http//training.gohtci.com/2017/06/20/drone-forensic-exploitation-course-dfec/

 
Posted : 12/07/2017 7:12 pm
RolfGutmann
(@rolfgutmann)
Posts: 1185
Noble Member
Topic starter
 

Is there a silver bullet to take over all kind of drones for sure? As these events occur fast and are over sometimes in minutes it is necessary to have a tool for taking over bullet-proofed.

Our financial budget got a further cut down so we have to build our own tools. Who did build its own DroneWeapon with WiFi directional antenna, router, go-home command and mobile power in form of a gun to solve this properly? Is there a chance to send a 'kill' command to shut down the engines to bring the drone to fall (nobody knows if the drone is able to drop explosives or acid liquids in an act of terror, so to immediately shut! down is the goal)?

Who saw already the most advanced DIY DroneWeapon (not CounterTerror Equipment)?

 
Posted : 12/07/2017 9:18 pm
Page 1 / 2
Share: