Should manual examination or file carving be required, it is best to use a forensic tool that provides access to the raw files on the Android device. Autopsy, the GUI-based upon the Sleuth Kit, runs on a Windows forensic workstation and can be downloaded from http://www.sleuthkit.org/autopsy/. Autopsy currently provides analytical support for Android devices. Both open source and Law Enforcement modules are available for Autopsy. These modules provide additional file carving and parsing support for applications and files found on Android devices and SD cards. For example, the open mobile forensics module provides mobile device parsing capabilities to pull out artifacts such as calls, SMS, chats, pictures, and more.
Practical Mobile Forensics
Practical Mobile Forensics
Overview of this book
Table of Contents (20 chapters)
Practical Mobile Forensics
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Preface
Free Chapter
Introduction to Mobile Forensics
Understanding the Internals of iOS Devices
Data Acquisition from iOS Devices
Data Acquisition from iOS Backups
iOS Data Analysis and Recovery
iOS Forensic Tools
Understanding Android
Android Forensic Setup and Pre Data Extraction Techniques
Android Data Extraction Techniques
Android Data Recovery Techniques
Android App Analysis and Overview of Forensic Tools
Windows Phone Forensics
BlackBerry Forensics
Index
Customer Reviews