Book Image

Learning Android Forensics

Book Image

Learning Android Forensics

Overview of this book

Table of Contents (15 chapters)
Learning Android Forensics
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Preface
Index

Snapchat analysis


Snapchat is an image-sharing and text-messaging service with over 100,000,000 downloads. Its signature feature is that images and videos sent will "self-destruct" after a time limit set by the sender, from 1-10 seconds. Furthermore, if a user takes a screenshot of the image, the sender is notified. Text chats do not have an expiration timer.

Package name: com.snapchat.android

Version: 8.1.2

Files of interest:

  • /cache/stories/received/thumbnail/

  • /sdcard/Android/data/com.snapchat.android/cache/my_media/

  • /shared_prefs/com.snapchat.android_preferences.xml

  • /databases/tcspahn.db

The /cache/stories/received/thumbnail path contains thumbnails of pictures taken by the user on the device. The /sdcard path contains full-sized images. These remain even after the time limit has expired, and the recipient can no longer access them. The files in both of these locations may not have proper file extensions.

The com.snapchat.android_preferences.xml file contains the e-mail address used to...