Forensic Event Reconstruction for Drones

Event reconstruction is one of the forensic processes used to determine and reconstruct event sequences of cybersecurity attacks or incidents. In drone forensics, existing research focuses on artifact extraction and analysis. Therefore, in this paper, we propose an event reconstruction method for drones using a directed graph representation. The sentiment analysis technique is used to investigate any events of interest that have been represented as graph vertices. Experimental results on drone public datasets indicate that the proposed method can reconstruct events and show the suspicious activities of a drone to assist in an investigation.