Learning Android Forensics - Second Edition

Creating a case in Belkasoft Evidence Center

To start creating a new case in BEC, perform the following steps:

1. Click New case button, fill the following fields:
   • Case name: The case name or number.
   • Root folder: The folder where the data from all the cases is stored.
   • Case folder: The folder where the current case data is stored.
   • Investigator: Examiner's name.
   • Time zone: The time zone used for displaying timestamps (UTC is recommended).
   • Description: The case overview:

2. Create and open button will bring you to the next window that is, Add data source window:

Belkasoft provides testing images with the product, so we can use an Android backup ...