ICACT20210119 Question.1
Questioner: jjyoo@etri.re.kr 2021-02-09 오후 1:55:15 |
ICACT20210119 Answer.1
Answer by Auhor James_Lan@htx.gov.sg 2021-02-09 오후 1:55:15
Chrome  Click!! |
| What is the main difference of the forensics method between the general other drone types and DJI Mavic Air 2? |
Thanks for the question.
Generally, the drones are Linux-based embedded devices, thus the extraction and examination methods are similar. One of the possible differences is the customization of using on-board encryption module, i.e. Trusted Zone. Thus we have to not only work on the extracted data, we also have to work on the device embedded data (trusted zone), thanks. |
ICACT20210119 Question.2
Questioner: debiii@naver.com 2021-02-09 오전 11:19:52 |
ICACT20210119 Answer.2
Answer by Auhor James_Lan@htx.gov.sg 2021-02-09 오전 11:19:52
Chrome Click!! |
| Thank you for the slides. How do I conduct a forensic examination if the drone's remote device is a device other than a smartphone? |
Thanks for the great question. If we understand the question correctly, the remote device is the remote control device. Forensics examination could be performed on the remote control device if 1. if the device has network access such as DJI mini with telnet access, thus can dd out the data in the remote controller. 2. We could also perform chip-off/chip-on on the rom, and perform required examination, thanks. |
ICACT20210119 Question.3
Questioner: jjyoo@etri.re.kr 2021-02-09 오후 1:50:51 |
ICACT20210119 Answer.3
Answer by Auhor James_Lan@htx.gov.sg 2021-02-09 오후 1:50:51
Chrome Click!! |
| How long does it take on average to complete a digital forensics examination of drones?
I hope that we will hear your future work concerning more in-depth forensic examinations on the remote control device and the application on the mobile phone at ICACT2022. |
Hi, thanks for the question.
That will depends on the internal memory size and the internal flight data, e.g. for a 16 GB Mavic Air 2, normally will takes between hours to days, on average around 3 days with the report.
Thanks, we will definitely present our findings in ICACT2022. |
ICACT20210119 Question.4
Questioner: camel@mail.cpu.edu.tw 2021-02-10 오전 11:35:19 |
ICACT20210119 Answer.4
Answer by Auhor James_Lan@htx.gov.sg 2021-02-10 오전 11:35:19
Chrome Click!! |
| Nice job! What is your main contribution on Drone forensic? |
Thanks and appreciated the question. The main contribution is to be able to link the drone mavic Air 2 flight Dat file (offline) to the drone. To add on, using 3D CT scan on the drone core board to determine the ISP chip-on data extraction is another point to mention. thanks. |
