Chapter 10. Android Data Recovery Techniques
While the data extraction and analysis techniques provide information about various details such as call logs, text messages, and other cellular functions, not all techniques can provide information about the deleted data. It is rare to find a smartphone today that doesn't contain data the user intended to delete. The probability that the deleted data contains sensitive information (which is why the data is deleted in the first place) is high. Hence, data recovery is a crucial aspect of mobile forensics as it helps to unearth the deleted items. This chapter aims to cover various techniques, which can be used by a forensic analyst to recover the data from an Android device.