Forensic tools overview

It is important for an examiner to understand how a forensic tool acquires and analyzes data to ensure nothing is missed and that the data is being decoded correctly. While manual extraction and analysis is useful, a forensic examiner may need the help of tools to accomplish the tasks involved in mobile device forensics. Forensic tools not only save time, but also make the process a lot easier. The following section describes four important tools that are widely used during forensic acquisition and the analysis of an Android device.

The AFLogical tool

AFLogical is an Android forensics tool developed by viaForensics. This tool performs logical acquisition of any Android device running either Android 1.5 or later versions. It allows the extracted data to be saved to the examiner's SD Card in CSV format. There are two editions in this tool: AFLogical Open Source Edition (OSE) and AFLogical Law Enforcement (LE).

AFLogical Open Source Edition

AFLogical Open Source Edition...