Book Image

Practical Mobile Forensics

Book Image

Practical Mobile Forensics

Overview of this book

Table of Contents (20 chapters)
Practical Mobile Forensics
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Preface
10
Android Data Recovery Techniques
Index

Summary


Recovery of the deleted data on Android devices depends on various factors which heavily rely on access to the data residing in the internal memory and SD card. While the recovery of deleted items from external storage such as an SD card is easy, recovery of deleted items from the internal memory takes considerable effort. SQLite file parsing and file-carving techniques are two methods to recover deleted data extracted from an Android device. The next chapter discusses Android forensic tools that can be helpful in extracting and acquiring data from Android devices. Both open source and commercial methods will be discussed.