Summary
Recovery of the deleted data on Android devices depends on various factors which heavily rely on access to the data residing in the internal memory and SD card. While the recovery of deleted items from external storage such as an SD card is easy, recovery of deleted items from the internal memory takes considerable effort. SQLite file parsing and file-carving techniques are two methods to recover deleted data extracted from an Android device. The next chapter discusses Android forensic tools that can be helpful in extracting and acquiring data from Android devices. Both open source and commercial methods will be discussed.