Book Image

Mastering Mobile Forensics

By : Soufiane Tahiri
Book Image

Mastering Mobile Forensics

By: Soufiane Tahiri

Overview of this book

Mobile forensics presents a real challenge to the forensic community due to the fast and unstoppable changes in technology. This book aims to provide the forensic community an in-depth insight into mobile forensic techniques when it comes to deal with recent smartphones operating systems Starting with a brief overview of forensic strategies and investigation procedures, you will understand the concepts of file carving, GPS analysis, and string analyzing. You will also see the difference between encryption, encoding, and hashing methods and get to grips with the fundamentals of reverse code engineering. Next, the book will walk you through the iOS, Android and Windows Phone architectures and filesystem, followed by showing you various forensic approaches and data gathering techniques. You will also explore advanced forensic techniques and find out how to deal with third-applications using case studies. The book will help you master data acquisition on Windows Phone 8. By the end of this book, you will be acquainted with best practices and the different models used in mobile forensics.
Table of Contents (14 chapters)
Mastering Mobile Forensics
About the Author
About the Reviewer
Preparing a Mobile Forensic Workstation

Android OS – all you need to know

Android is an open source Linux-based operating system, which was first developed by Android Inc. in 2003. Then in 2005 it was acquired by Google and was unveiled in 2007. The Android operating system, like most operating systems, consists of a stack of software components roughly divided into four main layers and five main sections, as shown in the following diagram (source: Each layer provides different services to the preceding layer:

Figure 1: Android OS architecture

The lowest layer is the Linux Kernel layer, which was edited by Google to make some changes, such as the addition of the Flash filesystem (YAFFS2). The entire Android OS is built on top of this layer. This layer contains all the essential drivers to ensure the interaction between device hardware and the upper layers. The Linux Kernel is an abstract layer between the hardware and the software (all other layers...