Digital Forensics

IoT Device Forensics

Evidence from smart and connected devices and their companion apps.

Connected devices, such as smart-home hubs, cameras, wearables, routers and vehicle or tracking units, can hold evidence about events, locations and activity. We identify what a device and its companion apps or cloud accounts may record, then acquire and analyse what is available.

Who it’s for

  • Investigators building a timeline of events
  • Legal teams needing device-based corroboration
  • Organisations assessing connected-device risk

What we examine

  • Smart-home and security devices
  • Wearables and trackers
  • Routers and network-attached devices
  • Companion mobile apps and linked cloud accounts

How an engagement works

Device identification

We establish what each device is, how it stores data and where that data syncs to.

Preservation

Volatile and cloud-synced data is preserved as early as possible.

Acquisition and analysis

Data is acquired from the device, app or account using appropriate methods.

Reporting

Findings with method and limitations.

What you need

  • Authority to examine the device and any linked accounts
  • Device details (make and model) and its companion app, if any

What you receive

  • Device and data-source inventory
  • Acquired data and hash record
  • Findings report

Limitations. IoT devices vary widely; many store little locally and rely on manufacturer cloud services with their own retention and access rules. Some devices cannot be acquired with current tools.

Please don’t upload evidence or send passwords through this website. Once we’ve discussed your matter, we’ll arrange a secure handover with a documented chain of custody. How evidence is handled.