This chapter presents an approach for conducting forensic timeline investigations on drone images, including data from internal memory and images from iOS and Android controllers. It explores techniques for extracting and constructing forensic timelines from these sources, with a particular focus on utilizing log2timeline plaso as the primary forensic timeline tool. The chapter offers a hands-on tutorial for applying plaso to drone images and provides practical and step-by-step guidance. Finally, it demonstrates how to analyze the constructed timeline to gain a deeper understanding of the security incident under investigation.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Forensic Timeline Analysis of Drones and UAVs

  • Hudan Studiawan,
  • Kim-Kwang Raymond Choo

摘要

This chapter presents an approach for conducting forensic timeline investigations on drone images, including data from internal memory and images from iOS and Android controllers. It explores techniques for extracting and constructing forensic timelines from these sources, with a particular focus on utilizing log2timeline plaso as the primary forensic timeline tool. The chapter offers a hands-on tutorial for applying plaso to drone images and provides practical and step-by-step guidance. Finally, it demonstrates how to analyze the constructed timeline to gain a deeper understanding of the security incident under investigation.