Skip to Main Content
Learning Android Forensics
book

Learning Android Forensics

by Rohit Tamma, Donnie Tindall
April 2015
Beginner to intermediate content levelBeginner to intermediate
322 pages
7h 11m
English
Packt Publishing
Content preview from Learning Android Forensics

Recovering data deleted from an SD card

Data present on an SD card can reveal a lot of information that is useful during a forensic investigation. The fact that pictures, videos, voice recordings, application data, and so on are stored on the SD card adds weight to this. As mentioned in the previous chapters, Android devices often use the FAT32 filesystem on the SD card. The main reason for this is that the FAT32 filesystem is widely supported in most operating systems, including Windows, Linux, and Mac OS X. The maximum file size on a FAT32-formatted drive is around 4 GB. With increasingly high resolution formats that are now available, this limit is commonly reached. Recovering the data deleted from an external SD can be pretty easy if it can ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Start your free trial

You might also like

Android Forensics

Android Forensics

Andrew Hoog
Learning Android Forensics - Second Edition

Learning Android Forensics - Second Edition

Oleg Skulkin, Donnie Tindall, Rohit Tamma
Hacking Android

Hacking Android

Mohammed A. Imran, Srinivasa Rao Kotipalli

Publisher Resources

ISBN: 9781782174578