IoT Device Forensics
Evidence from smart and connected devices and their companion apps.
Connected devices, such as smart-home hubs, cameras, wearables, routers and vehicle or tracking units, can hold evidence about events, locations and activity. We identify what a device and its companion apps or cloud accounts may record, then acquire and analyse what is available.
Who it’s for
- Investigators building a timeline of events
- Legal teams needing device-based corroboration
- Organisations assessing connected-device risk
What we examine
- Smart-home and security devices
- Wearables and trackers
- Routers and network-attached devices
- Companion mobile apps and linked cloud accounts
How an engagement works
Device identification
We establish what each device is, how it stores data and where that data syncs to.
Preservation
Volatile and cloud-synced data is preserved as early as possible.
Acquisition and analysis
Data is acquired from the device, app or account using appropriate methods.
Reporting
Findings with method and limitations.
What you need
- Authority to examine the device and any linked accounts
- Device details (make and model) and its companion app, if any
What you receive
- Device and data-source inventory
- Acquired data and hash record
- Findings report
Limitations. IoT devices vary widely; many store little locally and rely on manufacturer cloud services with their own retention and access rules. Some devices cannot be acquired with current tools.
Please don’t upload evidence or send passwords through this website. Once we’ve discussed your matter, we’ll arrange a secure handover with a documented chain of custody. How evidence is handled.