Android Forensics

Chapter 6

Android forensic techniques

Information in this chapter

• Procedures for handling an Android device

• Imaging Android USB mass storage devices

• Logical techniques

• Physical techniques

Introduction

Before we dive into the actual Android forensic techniques, there are a number of considerations that influence which technique forensic analysts should use. In this section, we will discuss the different types of investigations, the differences between logical and physical techniques, and how to limit or avoid modifications to the device.

Types of Investigations

There are a variety of situations that might benefit from the results of an Android forensic investigation. While the application of forensics is a commonality in all the situations, ...