Drone Forensic Analysis

24 Hours / 3-Day

Welcome to the world of UAV’s! Learn how to fly a Drone followed by best practices in conducting forensically sound extractions and analysis of UAS data.

InquireRegister for an upcoming class

Introduction to UAV Forensics

  • Introduction to sUAS
  • Criminal use of UAV’s
  • Manufacturers variables
  • Attack vectors – risks to public safety
  • Drone adaptation
  • Capacity & Capability of drones
  • Health & Safety – Handling & Seizure
  • Health & Safety – LiPo Batteries
  • Linked devices – Controller Considerations
  • Digital vs. Physical Evidence
  • Packaging / Storage & Continuity
  • Understanding how flight logs are created & updated
    • Aircraft power on a flowchart.

Components of sUAS

  • Components and features of small unmanned aircraft systems(sUAS)
  • Controller options
    • Mobile and Tablet Devices
    • Bespoke flight controllers
    • Integrated displays
    • FPV controllers
  • Autonomous flights
    • Return-to-home feature
    • WiFi controls
    • Signal interception.

Learning to Fly

  • Unpack ‘your’ aircraft
  • Recognizing components within the box
  • Basic instruction on flying the drone
  • Practical exercises in flying your drone
    • Collection techniques.

Extraction Techniques

  • Extraction of data from the aircraft
  • Extraction of data from the mobile \ tablet device
  • Extraction of controller data
  • Disassembling techniques
    • Arguments for and against

Interpretation of Data

  • Techniques in using open source and commercial forensic tools to review the data
    • Interpretation of data contained on the UAV
      • File System considerations
      • Registered user information
      • Aircraft details
      • Flight log analysis techniques
    • Interpretation of data from portable devices
      • Default folder structures of the controlling app from an Android and iOS device
      • Synchronized logs vs. local logs
      • Error log analysis
      • Media file examination (geolocations and dates & times)
      • Workflows in combining offline files for further analysis
  • Techniques in the interpretation of additional data on other devices.

Advanced Analysis Techniques

  • Flight recorder“Blackbox”
  • Advanced examination workflows
  • Additional App & Controller considerations
  • Linking hardware devices within the sUAS
  • Simplification of data – graphical representation
  • Mapping of flight paths.

Presentation of Evidence in court

  • Discussion on courtroom preparation & presentation

Report Writing

  • Glossary of terms
  • Overview of UAV report considerations
  • Report writing practical

Final Assessment

  • Student knowledge assessment.


To get the most out of this class, you should:

  • Have 6 months experience of forensic examinations
  • Be familiar with the Windows Operating system.

Download the Syllabus

Download a printable copy of the course description and key learning points.

Hosting Courses

If you are interested in hosting this, or any of our courses at your facility, contact us.

Ready to get started?