# Cyber4 Drone: A Systematic Review of Cyber Security and Forensics in Next-Generation Drones
## 6 Drone Forensics
### Drone Forensics Tools
\begin{table}
\begin{tabular}{l l l l l l l} \hline \hline  & \multicolumn{1}{c}{**Tools**} & \multicolumn{1}{c}{**Description**} & **OS** & **Os** & **Pr** & **Fw** & **Papers** \\ \hline \multirow{4}{*}{**C**} & DCode & Timestamps decoder & W & & & \(\checkmark\) & [8] \\  & DaTcon & Log Decoder for dat files & MW & & & [8; 40; 142; 143; 144] \\  & Phantomhelp & Convert data and kt to CSV & O & & & [40] \\  & CsvView & CSV file viewer & MW & \(\checkmark\) & & [40; 144; 145; 146] \\  & DROP & DAT file parser & LW & \(\checkmark\) & & [11] \\ \hline \multirow{4}{*}{**C**} & Nmap & Port scanning tool & LMW & & [15; 141; 147] \\  & Aircraft-ng & Wi-Fi Network security tool. & LMW & \(\checkmark\) & & [147] \\  & Wireshark & Deep packets analyzer & LMW & \(\checkmark\) & & [144] \\  & Xplico & Network forensic analysis tool & L & \(\checkmark\) & & [144] \\  & Network Miner & Network sniffer and capturing tool & LMW & \(\checkmark\) & [144] \\ \hline \multirow{4}{*}{**C**} & dcldld & dd + metadata to check integrity & L & & \(\checkmark\) & [144] \\  & Bitwalk & search binary files & L & \(\checkmark\) & & [8; 142] \\  & UEFD 4 PC & Mobile forensics framework & W & \(\checkmark\) & [8; 142] \\  & Exittool (GUI) & Checks the eif data of files & LMW0 & & \(\checkmark\) & [8; 10; 15; 141; 142; 143; 144; 145; 146] \\  & Autopsy & GUI version of Sleuth Kit & LMW & \(\checkmark\) & & [8; 40; 142; 144] \\  & FTK Imager & Imaging tool and data viewer & LMW & \(\checkmark\) & & [146] \\  & Encase & Imaging and analysis tool & W & \(\checkmark\) & [143] \\  & Magnet AXIOM & Acquire and analyze evidence & W & & \(\checkmark\) & [8; 142] \\  & fstat & Filesystem analysis & L & \(\checkmark\) & & [141; 148] \\  & fsck.2 fs & Checks and correct _f2 fs_ FS & L & \(\checkmark\) & & [141] \\  & Zfs-tools & SSD and SD card analysis & L & \(\checkmark\) & & [141] \\  & XRY & Analyze and recover information & W & \(\checkmark\) & [147] \\  & ExtractDII & Extract and decompress\_dat & MW & \(\checkmark\) & [40] \\  & Oxygen Forensics & Information extraction & W & \(\checkmark\) & [147] \\ \hline \multirow{4}{*}{**C**} & Litchi & Log data conversion & A & \(\checkmark\) & & [145] \\  & HJD & Hexa decimal editor & W & & \(\checkmark\) & [8] \\  & 010 editor & File content analysis & LMW & & \(\checkmark\) & [10] \\  & DJI fly & Access to SkyPile media & A & & \(\checkmark\) & [142] \\  & Open WRT & Embedded devices traffic analysis & L & \(\checkmark\) & & [142] \\  & Parteven's E3 Universal & Data processing and analysis & MW & \(\checkmark\) & [40] \\  & Kingo Rootkit & Android rooting & A & & \(\checkmark\) & [14, 148] \\  & BlueStacks & Android emulator & WM & & \(\checkmark\) & [146] \\  & Winhex & Hex editor & W & & \(\checkmark\) & [10] \\  & Medialinfo & Media file analysis & LMW0 & \(\checkmark\) & & [10] \\  & CyanogenMod OS & Custom rooted Android OS & A & \(\checkmark\) & & [141; 148] \\ \hline \hline \end{tabular}
\end{table} 
Table 7: Analysis of existing drone forensic tools (OS: Operating System, A: Android, L: Linux, M: MacOS, W: MS Windows, O: Online, Os: Open Source, Pr: Proprietary, Fw: Freeware).