// industry vertical
automotive / OEM app & telematics forensics
Rivian · OnStar · BMW · Mercedes · Tesla app exports · CAN/J1939 bus logs · UDS diagnostic sessions · multi-OEM GPS track correlation — when vehicle evidence is OEM app cache or bus dump, not generic OBD-II alone.
start here · primary tools
ordered. work top-down. the first tool is the suggested entry point for this vertical.
- rivian mobile app artifact forensic extractordrop rivian app cache + trip export · parse vehicle id + charge sessions + location pings · runs locally
- gm onstar mobile app forensic analyzerdrop onstar / mychevrolet app data export · parse remote commands + diagnostic alerts · runs locally
- can bus log forensic analyzerdrop candump / socketcan csv export · parse frame id bursts + ecu chatter timeline · runs locally
- vehicle telematics gps track export correlatordrop 2+ oem/telematics gps csv exports · correlate vin + timestamp route overlap · runs locally
- case report generatorfill in case number · examiner · dates · findings · drop evidence files for auto hash · generates structured forensic report PDF · runs locally
also useful · secondary tools
cross-cutting tools that surface depending on the specific investigation.
- tesla mobile app sync metadata forensic extractordrop tesla app plist/cache export · parse account vehicles + sentry clips index + charge prefs · runs locally
- j1939 heavy duty bus log forensic analyzerdrop j1939 pgn log export · parse engine + brake + transmission fault frames · runs locally
- uds diagnostic session forensic analyzerdrop uds/isotp session trace export · parse read/write dtc + security access attempts · runs locally
- obd2 forensic analyzertorque pro · forscan csv · dtc decode · hard brake · rapid accel · high speed events · trips · csv/json export · runs locally
- evidence manifest generatordrop evidence files · compute md5 sha1 sha256 · chain of custody manifest · case number · analyst · export pdf and csv · runs locally
want deeper automotive coverage?
this vertical is intentionally sparse — deep-moat coverage grows over time. tracked in the forensics rollout.