Android backups parsing with Belkasoft Evidence Center
The Belkasoft Evidence Center program has already been described in Chapter 2, Android Devices Acquisition. This program has functionality for data import from physical dumps and backups of Android mobile devices.
In this chapter, we will describe how to analyze a backup of an Android mobile device via Belkasoft Evidence Center.
How to do it…
- Double-click the icon of the program. When the program is started, create a new case. Click the
New Case
button. - Fill in the following fields:
Case name
,Root folder
,Case folder
,Investigator
, andTime zone
. If necessary, you can add a more detailed description of the case in theDescription
window. - After that, click the
Create and open
button located at the bottom of this window. In the next window, in the drop-down menu, you can select the category of files that will be displayed in it. - Select the
Android backup file (* .ab)
category, select the Android device's backup file, and then click theNext...