Chapter 8. Android Forensic Setup and Pre Data Extraction Techniques

Having an established forensic environment before the start of an examination is important as it ensures that the data is protected while the examiner maintains control of the workstation. This chapter will explain the process and considerations when setting up a digital forensic examination environment. It is paramount that the examiner maintains control of the forensic environment at all times. This prevents the introduction of cross contaminants that could effect the forensic investigation. This chapter aims to cover the minimum basic requirements that should be in place to start a forensic investigation of an Android mobile device.