Search icon CANCEL
Arrow left icon
Explore Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Conferences
Free Learning
Arrow right icon
Arrow up icon
GO TO TOP
Practical Mobile Forensics

You're reading from   Practical Mobile Forensics A hands-on guide to mastering mobile forensics for the iOS, Android, and the Windows Phone platforms

Arrow left icon
Product type Paperback
Published in Jan 2018
Publisher
ISBN-13 9781788839198
Length 402 pages
Edition 3rd Edition
Tools
Concepts
Arrow right icon
Authors (4):
Arrow left icon
Oleg Skulkin Oleg Skulkin
Author Profile Icon Oleg Skulkin
Oleg Skulkin
Satish Bommisetty Satish Bommisetty
Author Profile Icon Satish Bommisetty
Satish Bommisetty
Rohit Tamma Rohit Tamma
Author Profile Icon Rohit Tamma
Rohit Tamma
Heather Mahalik Heather Mahalik
Author Profile Icon Heather Mahalik
Heather Mahalik
Arrow right icon
View More author details
Toc

Table of Contents (14) Chapters Close

1. Introduction to Mobile Forensics FREE CHAPTER 2. Understanding the Internals of iOS Devices 3. Data Acquisition from iOS Devices 4. Data Acquisition from iOS Backups 5. iOS Data Analysis and Recovery 6. iOS Forensic Tools 7. Understanding Android 8. Android Forensic Setup and Pre-Data Extraction Techniques 9. Android Data Extraction Techniques 10. Android Data Analysis and Recovery 11. Android App Analysis, Malware, and Reverse Engineering 12. Windows Phone Forensics 13. Parsing Third-Party Application Files 14. Other Books You May Enjoy

Analyzing an Android image


The term Android image refers to the physical image (also called forensic image or raw image) that is obtained by performing any of the physical data extraction techniques. Using the techniques explained in Chapter 9, Android Data Extraction Techniques, you can image the entire /data/data block, or any particular block that is of relevance to the investigation. Once the image is obtained, an investigator can manually go through the contents of the file or take advantage of the available tools to parse through the contents. Commercial tools, such as Cellebrite, XRY, and so on, can drill into the data and present a comprehensive picture of the contents. Autopsy is one of the very widely used open source tools in the forensics world that performs an excellent job of analyzing an Android image.

Autopsy

Autopsy is a forensic platform and acts as a GUI for the Sleuth Kit. It is available for free; you can download it at: http://www.sleuthkit.org/. The Sleuth Kit is a collection...

lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at AU $24.99/month. Cancel anytime