Book Image

Learning Android Forensics

By : Rohit Tamma, Donnie Tindall
Book Image

Learning Android Forensics

By: Rohit Tamma, Donnie Tindall

Overview of this book

Table of Contents (15 chapters)
Learning Android Forensics
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Preface
Index

Summary


This chapter was an overview of a few free tools available for Android forensic examiners. These tools are summarized in the following table:

Tool

Features

ViaExtract

  • Free, requires registration and an active Internet connection

  • Logical extractions via an application pushed to the device

  • Backup extractions

  • Filesystem extractions if device is rooted

  • Roots devices

  • Bypasses screen locks without root by pushing an application to the device

Autopsy

  • Free and open source

  • Used to examine extractions done by other tools

  • Allows keyword searching, hash lists, and other common forensic methods

  • Powerful timeline feature

  • Can recover deleted data from supported filesystems

ViaLab

  • Free, requires registration and an active Internet connection

  • Allows an examiner to run an application from the APK and determine data storage locations

  • Runs the application in an emulator or on a test device

  • Valuable tool to show an examiner where data is stored in an app's directory, as well as see the functionality of the...