Vehicles nowadays are equipped with a vast amount of sensors that collect data for the vehicle and its environment. This, combined with the acceleration of the automotive industry towards interconnected and autonomous cars, suggests that security and specifically the ability to detect compromised nodes, collect and preserve evidence of an attack or malicious activities emerge as a priority in successfully deploying the Internet of Vehicle ecosystem. Until today Digital Forensics attempts are concerned with in vehicle forensics. In this paper we present the challenges of integrating digital forensics in an IoV ecosystem and we introduce the Attack Attribution and Forensics Readiness Tool of the nIoVe system, an integrated holistic cybersecurity solution for IoV.