Wi-Fi is not technically an application (as evidenced by the fact that it is not recovered from /data/data
), but it is an invaluable source of data that should be examined. So, we'll briefly discuss it here. Wi-Fi connection data is found in /data/misc/wifi/wpa_supplicant.conf
. The wpa_supplicant.conf
file contains a list of access points that the user has chosen to connect to automatically (this is set by default when a new access point is connected to). Access points that the user has "forgotten" through the device settings will not be shown. If the access point requires a password, that would also be stored in the file in plain text. In the following example, the NETGEAR60
access point required a password (ancientshoe601
), while hhonors
did not:
Learning Android Forensics
Learning Android Forensics
Overview of this book
Table of Contents (15 chapters)
Learning Android Forensics
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Preface
Free Chapter
Introducing Android Forensics
Setting Up an Android Forensic Environment
Understanding Data Storage on Android Devices
Extracting Data Logically from Android Devices
Extracting Data Physically from Android Devices
Recovering Deleted Data from an Android Device
Forensic Analysis of Android Applications
Android Forensic Tools Overview
Index
Customer Reviews