Digital Forensics on Automotive

In close co-operation with CanBusHack, the NFI is organising a two-day hands-on course on Digital Forensics on Automotive.

Modern vehicles are comprised of electronic controllers interconnected via several types of physical networks.  These networks shuttle thousands of parameters across in near real-time.

After having followed this course you will  (1) understand what kind of data is being sent over the CAN-bus, (2) where data may be stored and (3) how we might use standardize diagnostic protocols to retrieve stored data.


  • Diagnostic Protocols

  • Security Access

  • Device Control

  • Advanced CAN Bus Techniques

  • Understanding Network Messaging: Normal Mode Messages

  • Understanding Network Messages: OSEK, VNMF, and other NM Messages

  • ECU Programming basics

  • Reverse Engineering


In this course you will learn:

  • What vehicle controllers are
  • What vehicle controllers do
  • How vehicle controllers speak to each other
  • How to interact with the controllers
  • Methods for simulating a controller or the vehicle around a controller
  • Methods for communicating with a controller
  • Methods for querying data from the controller
  • Methods of modifying data

Target group

Digital investigators and traffic accident investigators from police or other government law enforcement organisations


  • A general understanding of vehicle diagnostics and vehicular data networks
  • Participants should bring a laptop running Windows 7 or newer

Dates and Location

Dates: no dates available.
Location: Netherlands Forensic Institute in The Hague, The Netherlands


Two consecutive days, 9:00 AM – 5:00 PM

Number of participants


Course fee

2295 euro for the two-days course (no VAT will be added)

This includes:

  • Certificate of attendance
  • CanBusHack Training Manual (pdf)
  • Simulation Hardware
  • Lunch and refreshments during the seminar

Hotel and travel costs are not included.


Robert Leale and colleague (CanBusHack)


For more information and to register complete our contact form. Please indicate on the form you are interested in the course 'Digital Forensics on Automotive'.