Having sound knowledge of Android's partition layout, filesystems, and important locations will help the forensic investigator during the process of extracting data from the device. The user data location on the Android device contains a bulk of user information that can be crucial for any forensic investigation. However, most of these files may be accessed only on a rooted phone (especially, files present in the /data/data location). You have also learned about Android data-storage options, various filesystems used by Android, and their significance.

With this knowledge, you will now learn how to logically and physically extract the data from an Android device in the upcoming chapters.