Vehicle Forensics — Digital Evidence Extraction for Vehicles

4F 46 46 53 45 54 20 30 78 30 30 30 30
42 54 5F 50 41 49 52 45 44 5F 44 45 56
69 50 68 6F 6E 65 20 28 37 37 29 00 00
53 51 4C 69 74 65 20 66 6F 72 6D 61 74
4E 41 56 5F 44 45 53 54 49 4E 41 54 49
44 45 53 20 4D 4F 49 4E 45 53 2C 20 49

55 43 4F 4E 4E 45 43 54 20 34 43 20 4E
51 4E 58 20 4E 65 75 74 72 69 6E 6F 20
65 4D 4D 43 20 33 32 47 42 20 50 41 52
50 61 6E 61 73 6F 6E 69 63 20 56 50 34
4E 4E 47 20 69 47 4F 20 76 39 2E 33 35

46 4F 52 45 4E 53 49 43 5F 49 4D 41 47
48 41 53 48 3A 20 53 48 41 32 35 36 20
43 48 41 49 4E 5F 4F 46 5F 43 55 53 54
54 49 4D 45 53 54 41 4D 50 3A 20 32 30
56 45 52 49 46 49 45 44 20 43 4F 50 59

42 4C 55 45 54 4F 4F 54 48 5F 44 42 2E
63 6F 6E 74 61 63 74 73 2E 64 62 00 00
63 61 6C 6C 5F 6C 6F 67 2E 73 71 6C 69
53 45 4C 45 43 54 20 2A 20 46 52 4F 4D
70 68 6F 6E 65 62 6F 6F 6B 5F 65 6E 74

4A 54 41 47 20 45 58 54 52 41 43 54 49
55 41 52 54 20 31 31 35 32 30 30 20 62
64 75 6D 70 20 2F 64 65 76 2F 6D 6D 63
62 69 74 2D 66 6F 72 2D 62 69 74 20 63
77 72 69 74 65 2D 62 6C 6F 63 6B 65 64

47 50 53 5F 48 49 53 54 4F 52 59 2E 64
34 31 2E 35 38 37 34 2C 20 2D 39 33 2E
44 45 53 5F 4D 4F 49 4E 45 53 5F 49 41
4C 41 53 54 5F 4B 4E 4F 57 4E 5F 50 4F
52 4F 55 54 45 5F 43 41 4C 43 55 4C 41

52 45 43 4F 56 45 52 59 5F 4D 4F 44 45
53 45 52 49 41 4C 3A 20 56 50 34 52 2D
46 57 5F 56 45 52 3A 20 31 38 2E 34 37
43 41 4E 42 55 53 20 30 78 37 44 46 20
4F 44 4F 4D 45 54 45 52 3A 20 30 78 31

45 56 49 44 45 4E 43 45 5F 54 41 47 3A
43 41 53 45 5F 49 44 3A 20 56 46 2D 32
45 58 41 4D 49 4E 45 52 3A 20 42 4F 4C
52 45 50 4F 52 54 5F 47 45 4E 45 52 41
43 4F 55 52 54 5F 52 45 41 44 59 00 00

In Beta

Your car knows more than you think.

Vehicle Forensics extracts digital evidence from car infotainment systems — Bluetooth pairings, navigation history, call logs, paired devices, and more. Court-admissible from day one.

Learn more

What We Extract

Your infotainment system is a hard drive with a steering wheel.

Modern vehicles store a surprising amount of personal data. We know where to find it.

Bluetooth Pairings

Every phone that ever connected. Device names, MAC addresses, pairing timestamps. Proves who was in the vehicle and when.

Navigation History

Every destination searched, every route calculated, every favorite saved. GPS coordinates with timestamps. Where they went, when they went.

Call Logs & Contacts

Synced phonebooks, recent calls, missed calls. The head unit caches this data even after the phone disconnects. Sometimes for years.

Text Messages

SMS and MMS synced via Bluetooth MAP profile. The vehicle stores message content, sender, and timestamp in local databases.

Projection Devices

Apple CarPlay and Android Auto connection history. Device identifiers, connection counts, and timestamps for every smartphone projection session.

System Events

Ignition cycles, door openings, speed logs, odometer readings. The CAN bus doesn't forget. Neither do we.

The Process

We speak the machine's language.

Vehicle infotainment systems run on embedded operating systems — QNX, Linux, Android Automotive — with proprietary databases scattered across eMMC flash storage.

We use progressive extraction methods. Start non-invasive (USB, UART), escalate only if needed (JTAG, chip-off). Every byte is hashed, timestamped, and documented for court.

Current focus: Chrysler/Dodge/Jeep Uconnect systems (Panasonic VP4R platform, NNG iGO navigation). Expanding to Ford SYNC and GM IntelliLink.

$ vf-extract --target uconnect-4c --method uart

[INIT] Connecting to VP4R via UART @ 115200 baud
[SCAN] eMMC detected: 32GB (nav partition: 17.6GB)
[SCAN] OS: QNX Neutrino RTOS
[SCAN] Nav: NNG iGO v9.35.2.96141

[EXTRACT] Bluetooth pairings ......... 4 devices
[EXTRACT] Projection devices ......... 13 sessions
[EXTRACT] Navigation destinations .... 29 entries
[EXTRACT] Contacts (synced) .......... 847 records
[EXTRACT] Call log ................... 312 calls
[EXTRACT] SMS cache .................. 156 messages

[HASH] SHA-256: a7c3f9...e41b
[DONE] Report generated. Court-ready.

Forensic Standards

Built for the courtroom, not the classroom.

Every extraction follows forensic-grade procedures from the first byte to the final report.

Chain of Custody

Every action logged with timestamps, examiner ID, and tool versions. Unbroken chain from vehicle to report.

Cryptographic Hashing

SHA-256 hashes on every image and extracted artifact. Proves data integrity — nothing added, nothing altered.

Write-Protected Imaging

Bit-for-bit forensic images created on write-blocked media. The original evidence is never modified.

Expert Reporting

Reports written for judges and juries, not just engineers. Plain-language findings backed by technical exhibits.

Who This Is For

The people who need what's in the machine.

⚖

Attorneys

Prove presence, establish timelines, corroborate or challenge testimony with data the other side doesn't know exists.

🔍

Private Investigators

Vehicle data fills gaps that phone records and surveillance can't. Bluetooth pairings and nav history don't lie.

🛡

Law Enforcement

Supplement existing digital forensics with vehicle-specific extraction. Most agencies don't have this capability in-house.