In this chapter, we introduce forensics and techniques used to perform it. We walk the reader through the Android file system, directories, and mount points. We cover SD card analysis and Android-specific techniques to perform forensics. Finally, we walk the reader through an example that demonstrates topics covered in this chapter.
Mobile device forensics is a branch of digital forensics that relates to the recovery of digital evidence or data from a mobile device under forensically sound conditions (http://en.wikipedia.org/wiki/Mobile_device_forensics).
As discussed in Chapter 1, mobile devices today are a different beast. They are used for all kind of communications, transactions, and tasks. The following ...