Physical extraction refers to the process of obtaining an exact bit-by-bit image of a device. It is important to understand that a bit-by-bit image is not the same as copying and pasting the contents of a device. If we copy and paste the contents of a device, it will only copy the available files, such as visible files, hidden files, and system-related files. This method is considered a logical image. With this method, deleted files and files that are not accessible are not copied by the copy command. Deleted files can be recovered (based on the circumstances) using certain techniques, which we will see in the following chapters. Unlike logical extraction, physical extraction is an exact copy of the device's memory and includes more information, such as the slack space and unallocated space.
Android data extraction through physical techniques is commonly...
