Chapter 5. Extracting Data Physically from Android Devices
This chapter will be covering physical data extraction using free and open source tools wherever possible. The majority of the material covered in this chapter will use the ADB methods previously discussed in this book. By the end of this chapter, the reader should be familiar with the following concepts:
- What physical extraction means
- What data to expect from physical extractions
- Physical data extractions using the
dd
andnanddump
commands - RAM imaging and analysis
- SD card acquisitions
- JTAG and chip-off methods