Analyzing backups
It is also recommended that you check whether the device has any backup applications or files installed. The initial release of Android did not include a mechanism for the users to back up their personal data. Hence, several backup applications have been used extensively by the users. Using these apps, users have the ability to back up their data either to the SD card or to the cloud. For example, the Super Backup
app contains the options to back up call logs, contacts, SMS, and so on, as shown in the following screenshot:
On detection of a backup application, the forensic examiners must attempt to determine where the data is stored. The data saved in a backup may contain important information, so looking for any third-party backup app on the device could be very helpful.
You can also restore the contacts on the device using the Restore Contacts option through the Google account configured on the device. This would work if the user of the device...