Digital Forensics of Heavy Vehicle Event Data Recorders

Most heavy vehicles in use today have some sort of event data recorder (EDR). These EDRs monitor and record data from the vehicle and are often capable of providing information about the operation of the vehicle. This data can be used in courts and thus needs to be treated as digital forensic evidence.

Understanding how to obtain, preserve and interpret these data in a forensically sound manner is important to crash investigators, engineers, safety managers and law enforcement as they try to discover the truth of how and why crashes involving heavy vehicles happen…which is the objective of this three-day program.

Participant Comments:

Owner/Investigator, KBI & Associates LLC: “Professional investigators must have high quality training and Univ. of Tulsa provides the required instruction. Thank you.”
Provincial Constabe, Ontario Provincial Police: “Instructors were very knowledgeable, facilities were great with various hands-on stations…Would highly recommend to all in this field.”
Owner, Wilcoxson Consulting, LLC: “Excellent – in-depth – best part is hands-on!”
Staff Engineer, OEC Forensics: “Good course on the inner workings of HVEDRs.”

Digital Forensics of Heavy Vehicle Event Data Recorders flyer.

Upcoming Course

July 11 – 13, 2017 – Tulsa, OK
(Days 1 & 2: 8:30 a.m. – 4:30 p.m.; Day 3: 8:30 a.m. – 3:00 p.m.)
Register for this Course

In-Company Training

Many courses offered by CESE are also available on-site. In-company training simplifies scheduling, ensuring more of your employees will be able to attend and learn. Request a Course Quote


Jeremy Daily, Scott Skinner, Tony Becker

Who Should Attend

  • Law Enforcement responsible for investigating crashes
  • Private crash reconstruction professionals
  • Fleet safety personnel
  • Crash Investigators
  • Engineers
  • Safety Managers

During this three-day course, you will learn how to:

  • Access and preserve hvEDR data using forensically sound techniques so it is viable in court.
  • Troubleshoot connection and power problems with forensic tools and heavy vehicle systems.
  • Connect ECMs to sensor simulators to set up a fault free environment and obtain data without overwriting information of interest.
  • How the reported data are determined so that valid interpretations can be made.
  • The known limitations of the data, including when the data is not captured.
  • The basics of digital forensics and forensic soundness of data.
  • Practical vehicle network principles, including J1939, J1587/J1708, and RP1210


Additional course, hotel and shuttle information will be sent to you prior to the course start date.

Hotel Room Reservations

Need Room Reservations? We have reserved a block of rooms at the Doubletree Hotel at Warren Place (6110 S. Yale, Tulsa, OK 74136) at the University of Tulsa rate of $97.00. Contact the hotel directly at 1-800-801-1317 (or 918-495-1000) to make your reservations. We will provide daily shuttle service from this hotel only to the course held at the university.

Program Highlights

  • Training incorporates the new Forensic Link Adapter and Smart Sensor Simulator
  • Hands-on practice opportunities with actual ECMs available for practicing
  • Combination of theory and practical training to maximize content and knowledge retention
  • Students will receive the guidelines on the process of downloading each engine manufacturer in an editable electronic format which can be customized
  • Participants will be given the opportunity to practice the download process with the guidance of the instructors
  • Small group lab exercises and discussions
  • The program is team-taught by leading industry experts

Course Summary

  • Types of Data and Data Availability
  • Reading and Understanding schematics and manuals
  • How Data Gets Generated on an ECM
  • Setting Up and Managing the Forensic Link Adapter
  • Hands on Downloading with the FLA
  • Introduction to Digital Encoding and Decoding
  • Lab: Understanding Vehicle Speed Sensors and creating records using a Cummins ECM
  • Lab: Setting Fault Codes and understanding diagnostic records from Detroit Diesel Modules
  • Lab: Caterpillar ECMs and using Smart Sensor Simulators
  • Lab: Locating and Connecting to ECMs on Operational Trucks
  • Working with J1939 and J1587
  • Smart Sensor Simulator Theory of Operation
  • Clearing Fault Codes
  • Practice with Protocols
  • Foundations of Digital Forensics
  • Chip Level Forensics


  • ACTAR has awarded this course 20 CEUs.
  • Professional Development Hours (PDHs): 17.50
  • General Continuing Education Units (CEUs): 1.75