Packt+ | Advance your knowledge in tech

You're reading from Learning Android Forensics A hands-on guide to Android forensics, from setting up the forensic workstation to analyzing key forensic artifacts

Product type Paperback

Published in Apr 2015

Publisher

ISBN-13 9781782174578

Length 322 pages

Edition 1st Edition

Languages

Java

Tools

Android

Concepts

Forensics

Learning Android Forensics

Credits

About the Authors

About the Reviewers

www.PacktPub.com

Preface

1. Introducing Android Forensics FREE CHAPTER

2. Setting Up an Android Forensic Environment

3. Understanding Data Storage on Android Devices

4. Extracting Data Logically from Android Devices

5. Extracting Data Physically from Android Devices

6. Recovering Deleted Data from an Android Device

7. Forensic Analysis of Android Applications

8. Android Forensic Tools Overview

Index

This chapter was an overview of a few free tools available for Android forensic examiners. These tools are summarized in the following table:

Tool	Features
ViaExtract	Free, requires registration and an active Internet connection Logical extractions via an application pushed to the device Backup extractions Filesystem extractions if device is rooted Roots devices Bypasses screen locks without root by pushing an application to the device
Autopsy	Free and open source Used to examine extractions done by other tools Allows keyword searching, hash lists, and other common forensic methods Powerful timeline feature Can recover deleted data from supported filesystems
ViaLab	Free, requires registration and an active Internet connection Allows an examiner to run an application from the APK and determine data storage locations Runs the application in an emulator or on a test device Valuable tool to show an examiner where data is stored in an app's directory, as well as see the functionality of the...

The rest of the chapter is locked