Summary

Android app analysis helps a forensic investigator to look for valuable data in relevant locations on the device. Reverse engineering Android apps is the process of retrieving source code from an APK file. Using certain tools, such as dex2jar, Android apps can be reverse engineered in order to understand the functionality of the app and data storage, identify malware, and more. Identifying malware present on the device is crucial as it may affect the outcome of the investigation. Tools such as UFED Physical Analyzer come with BitDefender software, which can automatically scan for malware. The next chapter covers performing forensics on Windows Mobile devices.