Book Image

Learning Android Forensics

By : Rohit Tamma, Donnie Tindall
Book Image

Learning Android Forensics

By: Rohit Tamma, Donnie Tindall

Overview of this book

Table of Contents (15 chapters)
Learning Android Forensics
About the Authors
About the Reviewers

Snapchat analysis

Snapchat is an image-sharing and text-messaging service with over 100,000,000 downloads. Its signature feature is that images and videos sent will "self-destruct" after a time limit set by the sender, from 1-10 seconds. Furthermore, if a user takes a screenshot of the image, the sender is notified. Text chats do not have an expiration timer.

Package name:

Version: 8.1.2

Files of interest:

  • /cache/stories/received/thumbnail/

  • /sdcard/Android/data/

  • /shared_prefs/com.snapchat.android_preferences.xml

  • /databases/tcspahn.db

The /cache/stories/received/thumbnail path contains thumbnails of pictures taken by the user on the device. The /sdcard path contains full-sized images. These remain even after the time limit has expired, and the recipient can no longer access them. The files in both of these locations may not have proper file extensions.

The com.snapchat.android_preferences.xml file contains the e-mail address used to...