Skip to content
personpersonDwight FalkofskeDwight FalkofskeFBI electronics engineer and automotive-forensics specialist who examined the Suburban's infotainment and OnStar data.← All People
Expert witness

Dwight Falkofske

Courtroom still of Dwight Falkofske.

FBI electronics engineer and automotive-forensics specialist who examined the Suburban's infotainment and OnStar data.

301 lines·7 proceedings·3 mentions

About

FBI electronics engineer Dwight Falkofske testified for the State. He described extracting information from automotive-system memory and converting binary data into readable records. Because commercial software did not support the encrypted infotainment and OnStar modules in the 2021 Chevrolet Suburban, an FBI team used an identically configured test vehicle to recover encryption keys and spent approximately one year developing a parser.

On direct examination, Falkofske presented call-log and vehicle-state information recovered from the Suburban. The records included 911-related call entries and several changes between in-park and out-of-park states, including an interval of approximately sixteen minutes beginning shortly after 9:06 p.m. He cautioned that the call logs did not show when information was downloaded from the connected phone, and the park-state records did not establish whether the vehicle moved or who occupied it. He also could not explain why an out-of-park entry after 10:13 p.m. lacked a matching return-to-park message.

On cross-examination, Falkofske acknowledged that his unit had not sought assistance from General Motors, had not identified every event capable of waking the infotainment system, and had not tested whether approaching with a key fob could cause a startup. He described same-second engine messages as confusing but said they appeared to show the engine running. He declined to validate a defense device-history printout until reviewing its source material, then explained that paired devices could connect automatically and confirmed that the recovered data contained no vehicle-location information for June 7.

Trial Record (7)

20232023 Murder TrialJan 23, 2023 โ€“ Mar 3, 2023Called by prosecution

FBI electronics engineer Dwight Falkofske testified for the State as an automotive forensic specialist about extracting and interpreting encrypted data from the Suburban's infotainment and OnStar modules. He identified call-log and vehicle-state entries while explaining their limits concerning movement, occupants, timing, and location.

Day 13

Voir DireDwight Falkofske - Voir DireDwight FalkofskeJohn B. Conrad1highlight17lines spoken

Summary

FBI electronics engineer Dwight Falkofske described his automotive-data extraction work and was qualified without defense objection as an automotive forensic specialist.

Highlights (1)

Quoteโ€œSo, I take a look at automotive systems and extract data off of the memory components of those systems, and then from the images we get from those memory components, I will take a look at their -- find the data that we're interested in finding, and we will create parsing tools that will pull out that data and take it from a computer format to a human readable format.โ€— Dwight FalkofskeFalkofske summarized the technical process underlying his work in automotive forensics.Open in transcript →Watch this moment ▶
DirectDwight Falkofske - DirectDwight FalkofskeJohn B. Conrad2highlights243lines spoken

Summary

FBI engineer Dwight Falkofske explained the Suburban's encrypted logs, test-vehicle validation, 911 call entries, and park-state timeline while stressing that the data could not prove movement or identify an occupant.

Highlights (2)

Quoteโ€œWe ran into our first instance of data being encrypted on a vehicle.โ€— Dwight FalkofskeFalkofske described the unusual technical obstacle that required the FBI team to develop a new decryption method.Open in transcript →Watch this moment ▶
Quoteโ€œAt some point, the system would have downloaded that information from the phone. I don't know what time that occurred.โ€— Dwight FalkofskeFalkofske limited the temporal significance of the recovered 911 call-log entries.Open in transcript →Watch this moment ▶
CrossDwight Falkofske - CrossDwight FalkofskePhillip D. Barber1highlight15lines spoken

Summary

Falkofske limited what could be inferred from the Suburban's infotainment logs and required the original data before validating a defense device-history printout.

Highlights (1)

Quoteโ€œWe know that -- some events that make it happen, such as opening the door or starting the car. We don't know all of the events that might make that happen.โ€— Dwight FalkofskeFalkofske expressly limited what could be inferred from an infotainment-system startup entry.Open in transcript →Watch this moment ▶

Day 14

CrossDwight Falkofske - CrossDwight FalkofskePhillip D. Barber2highlights26lines spoken

Summary

Dwight Falkofske explained the Suburban's automatic Bluetooth connections, confirmed that no location data was recovered for June 7, and authenticated a vehicle-event report admitted as Defendant's Exhibit 90.

Highlights (2)

Quoteโ€œOur whole analysis took just about one year.โ€— Dwight FalkofskeFalkofske quantified the substantial effort required to extract and interpret the encrypted vehicle data.Open in transcript →Watch this moment ▶
Quoteโ€œThere was no location data recovered on June 7th.โ€— Dwight FalkofskeThe statement identifies a direct limitation in the vehicle evidence for the date at issue.Open in transcript →Watch this moment ▶

Day 16

Day 20