Drone & IoT Forensics.
Field-to-Lab Intelligence.

Extract, decode, and analyze flight data from commercial drones—DJI, Autel, Parrot, Skydio—and custom builds running Pixhawk, ArduPilot, or PX4. Turn device artifacts into actionable investigative intelligence.

  • Built for Investigators
  • Chain-of-Custody Ready
  • Rapid Extraction
  • Actionable Intelligence

Our Solutions

Comprehensive forensic capabilities for drones and wearable devices

Primary Focus

Commercial Drone Forensics

Full-spectrum analysis of consumer and enterprise drones: DJI, Autel, Parrot, Skydio, and more. Extract flight logs, media, controller artifacts, and mobile app data.

Learn more

Custom Drone / Pixhawk & FPV

Dive into open-source flight stacks: ArduPilot, PX4, Betaflight blackbox logs. Hardware-level acquisition from SD cards, flash chips, and telemetry radios.

Learn more
Additional Offering

Wearables / Smartwatch Forensics

Extract app artifacts, health data timelines, sensor logs, and location history from smartwatches and fitness trackers.

Learn more

Commercial Drone Forensics

Deep analysis of consumer and enterprise drone ecosystems

What We Extract

  • Flight logs with GPS coordinates, altitude, speed, and timestamps
  • Controller/mobile device pairing artifacts and user accounts
  • Media files (photos, video) with embedded EXIF/XMP metadata
  • Firmware versions, serial numbers, and component identifiers
  • No-fly zone overrides and geofence modification attempts
  • Battery cycles, error logs, and crash data

What You Learn

  • Precise flight paths and mission timelines
  • Operator identity and device attribution
  • Evidence of tampering or unauthorized modifications
  • Corroboration with other digital evidence sources
  • Expert-ready reports for legal proceedings

Supported Ecosystems

Drone Forensics

Open-source flight stacks and hardware-level acquisition

Custom-built drones running ArduPilot, PX4, or Betaflight present unique forensic challenges. Our methodology combines software log parsing with hardware-level acquisition techniques to recover data from SD cards, onboard flash, and telemetry radios.

Flight Controller Logs

ArduPilot .bin/.log, PX4 ULog, Betaflight blackbox decoding with full parameter reconstruction

Flash & SD Acquisition

Forensic imaging of SD cards, eMMC, and SPI flash chips with hash verification

Telemetry Radios

MAVLink telemetry capture, SiK radio configurations, ground station log correlation

Debug Interfaces

JTAG, SWD, and UART interfaces for firmware and memory extraction when standard methods fail

Our Forensic Pipeline

1

Acquire

Forensic imaging with write-blocking and chain-of-custody documentation

2

Decode

Parse proprietary formats, reconstruct flight parameters and sensor data

3

Correlate

Cross-reference with external evidence: GPS, timestamps, media, witnesses

4

Report

Generate court-ready reports with visualizations and expert annotations

Smartwatch & Wearables Forensics

Wearable devices capture rich behavioral data—steps, heart rate, sleep patterns, location history—that can prove critical in investigations. Our wearables forensics service extracts and correlates this data with other digital evidence sources.

  • Device extraction (logical and physical where supported)
  • App artifact recovery and analysis
  • Health and activity timeline reconstruction
  • Sensor data correlation (accelerometer, gyroscope, heart rate)
  • Cloud account and paired device analysis

Case Workflow

A structured, repeatable process for every engagement

1

Intake & Triage

  • Review case context and objectives
  • Identify device types and data sources
  • Establish chain-of-custody protocols
2

Acquisition

  • Forensic imaging with write-blocking
  • Hash verification (MD5, SHA-256)
  • Documentation of device state and condition
3

Verification

  • Validate data integrity
  • Cross-check timestamps and metadata
  • Identify gaps or anomalies
4

Analysis

  • Parse flight logs and telemetry
  • Reconstruct timelines and geospatial data
  • Correlate with external evidence
5

Reporting

  • Generate comprehensive forensic report
  • Include visualizations and flight path maps
  • Expert testimony support available

About Qrelabs

Our Mission: Make drone incidents attributable and explainable.

Qrelabs was founded by digital forensics practitioners who recognized a critical gap: as drones proliferate in commercial, recreational, and criminal contexts, investigators need specialized tools and expertise to extract meaningful evidence from these complex systems.

We bridge the gap between traditional digital forensics and the rapidly evolving world of unmanned aerial systems. Our team combines deep expertise in embedded systems, mobile device forensics, and flight dynamics to deliver actionable intelligence from drone evidence.

Our Values

Evidence Integrity

Every acquisition is verified, documented, and defensible

Repeatability

Standardized methods that produce consistent, reliable results

Investigator Usability

Clear reports that non-technical stakeholders can understand

Contact Us

Ready to discuss your case? Get in touch.