Browse Library
Sign In Start Free Trial
Close icon Search icon
Account
Browse Library Sign In Start Free Trial

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Learning Android Forensics
  • Table Of Contents Toc
Learning Android Forensics

Learning Android Forensics

4.2 (6)
Buy this Book
close
close
Learning Android Forensics

Learning Android Forensics

4.2 (6)
Buy this Book

Overview of this book

If you are a forensic analyst or an information security professional wanting to develop your knowledge of Android forensics, then this is the book for you. Some basic knowledge of the Android mobile platform is expected.
Table of Contents (10 chapters)
close
close
close
Preface
Icon
Preface
Icon
What this book covers
Icon
What you need for this book
Icon
Who this book is for
Icon
Conventions
Icon
Reader feedback
Icon
Customer support
Lock Free Chapter
1
1. Introducing Android Forensics
Icon
1. Introducing Android Forensics
Icon
Mobile forensics
Icon
The mobile forensics approach
Icon
Challenges in mobile forensics
Icon
The Android architecture
Icon
Android security
2
2. Setting Up an Android Forensic Environment
chevron up
Icon
2. Setting Up an Android Forensic Environment
Icon
The Android forensic setup
Icon
The Android SDK
Icon
Connecting and accessing an Android device from the workstation
Icon
Android Debug Bridge
Icon
Rooting Android
Icon
ADB on a rooted device
Icon
Summary
3
3. Understanding Data Storage on Android Devices
Icon
3. Understanding Data Storage on Android Devices
Icon
Android partition layout
Icon
Android file hierarchy
Icon
Application data storage on the device
Icon
Android filesystem overview
Icon
Summary
4
4. Extracting Data Logically from Android Devices
Icon
4. Extracting Data Logically from Android Devices
Icon
Logical extraction overview
Icon
Manual ADB data extraction
Icon
ADB backup extractions
Icon
ADB Dumpsys
Icon
Bypassing Android lock screens
Icon
Cracking an Android pattern lock
Icon
Android SIM card extractions
Icon
Issues and opportunities with Android Lollipop
Icon
Summary
5
5. Extracting Data Physically from Android Devices
Icon
5. Extracting Data Physically from Android Devices
Icon
Physical extraction overview
Icon
Extracting data physically with dd
Icon
Extracting data physically with nanddump
Icon
Analyzing a full physical image
Icon
Imaging and analyzing Android RAM
Icon
Acquiring Android SD cards
Icon
Advanced forensic methods
Icon
Summary
6
6. Recovering Deleted Data from an Android Device
Icon
6. Recovering Deleted Data from an Android Device
Icon
An overview of data recovery
Icon
Recovering data deleted from an SD card
Icon
Recovering data deleted from internal memory
Icon
Analyzing backups
Icon
Summary
7
7. Forensic Analysis of Android Applications
Icon
7. Forensic Analysis of Android Applications
Icon
Application analysis
Icon
Determining what apps are installed
Icon
Wi-Fi analysis
Icon
Contacts/call analysis
Icon
SMS/MMS analysis
Icon
User dictionary analysis
Icon
Gmail analysis
Icon
Google Chrome analysis
Icon
Google Maps analysis
Icon
Google Hangouts analysis
Icon
Google Keep analysis
Icon
Google Plus analysis
Icon
Facebook analysis
Icon
Facebook Messenger analysis
Icon
Skype analysis
Icon
Snapchat analysis
Icon
Viber analysis
Icon
Tango analysis
Icon
WhatsApp analysis
Icon
Kik analysis
Icon
WeChat analysis
Icon
Application reverse engineering
Icon
Summary
8
8. Android Forensic Tools Overview
Icon
8. Android Forensic Tools Overview
Icon
ViaExtract
Icon
Autopsy
Icon
ViaLab Community Edition
Icon
Summary
Icon
Conclusion
9
Index
Icon
Index

Summary

Setting up a proper forensic environment is crucial prior to conducting investigation on an Android device. The Android SDK installation is necessary to use tools such as ADB that come along with it. Using ADB, an examiner can communicate with the device, view folders on the device, and pull data and copy data to the device. However, not all folders can be accessed on a normal phone in this manner. This is because the device's security enforcements prevent an examiner from viewing the locations that contain private data. Rooting a device solves this issue, as it provides unlimited access to all the data present on the device. Rooting a device with an unlocked boot loader is straightforward, while rooting a device with a locked boot loader involves exploiting some security bug.

With this knowledge about accessing the device, you will now learn how data is organized on an Android device and many other details in Chapter 3, Understanding Data Storage on Android Devices.

CONTINUE READING
83
Tech Concepts
36
Programming languages
73
Tech Tools
Icon Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.
Icon Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.
Icon 50+ new titles added per month and exclusive early access to books as they are being written.
Learning Android Forensics
End of Chapter 2
Next Chapter
notes
bookmark Notes and Bookmarks search Search in title playlist Add to playlist font-size Font size

Change the font size

margin-width Margin width

Change margin width

day-mode Day/Sepia/Night Modes

Change background colour

Close icon Search
Country selected
Close icon Your notes and bookmarks

Confirmation

Modal Close icon
claim successful
Order Page Read Now

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY

Submit Your Feedback

Modal Close icon
Modal Close icon
Modal Close icon