Chapter 6. Recovering Deleted Data from an Android Device
The extraction and acquisition techniques that you have learned so far will help you access various details such as call logs, messages, and so on. However, these techniques do not help us see the data that is deleted from the device. In this chapter, you will learn about data-recovery techniques that will enable you to view the data that is deleted on the device. Deleted data could contain highly sensitive information, and thus, data recovery is a crucial aspect of mobile forensics. In this chapter, we will cover the following topics:
- An overview of data recovery
- Recovering data deleted from an SD card
- Recovering data deleted from a phone's internal storage