Chapter 10

Mobile App Investigations

Learning Outcomes

After reading this chapter, you will be able to understand the following:

  • The importance of mobile apps in investigations;

  • How to perform a static and dynamic analysis;

  • The digital evidence available from dating, rideshare, and other popular apps;

  • The value of deep-linking in investigations; and

  • Analyzing SQLite databases.

Mobile applications (apps) are extremely important today in investigations for a variety of reasons. Interestingly, the databases associated with many apps, are unencrypted and are not too difficult to analyze. Furthermore, if a mobile device is locked or inaccessible, there are many other options available, which may include analyzing a linked desktop version of the ...

Get A Practical Guide to Digital Forensics Investigations, 2nd Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.