Skip to Main Content
Learning Android Forensics - Second Edition
book

Learning Android Forensics - Second Edition

by Oleg Skulkin, Donnie Tindall, Rohit Tamma
December 2018
Beginner to intermediate content levelBeginner to intermediate
328 pages
8h 29m
English
Packt Publishing
Content preview from Learning Android Forensics - Second Edition

Facebook analysis

Facebook is a social media application with more than 1,000,000,000 downloads from Google Play.

Package name: com.facebook.katana

Files of interest:

  • /files/video-cache/
  • /cache/images/
  • /databases/
    • bookmarks_db2
    • contacts_db2
    • nearbytiles_db
    • newsfeed_db
    • notifications_db
    • prefs_db
    • threads_db2

The /files/video-cache directory contains videos from the user's newsfeed, though there does not appear to be a way to correlate them with the user who posted them.

The /cache/images directory contains images from the user's newsfeed, as well as profile photos of contacts. The directory contains a multitude of other directories (65 on our test phone), and each directory can contain multiple .cnt files. The .cnt files are typically JPG ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Start your free trial

You might also like

Learning Android Forensics

Learning Android Forensics

Rohit Tamma, Donnie Tindall
Windows Forensics Cookbook

Windows Forensics Cookbook

Scar de Courcier, Oleg Skulkin
Hacking Android

Hacking Android

Mohammed A. Imran, Srinivasa Rao Kotipalli

Publisher Resources

ISBN: 9781789131017Other