January 2018
Beginner to intermediate
402 pages
10h 6m
English
Once the image is loaded, expand the file present under Data Sources to see data present in the image. For example, the following screenshot shows the contents of the /data/data folder:

In the preceding example, only the /data portion of the device has been imaged. If the entire device is imaged, then the tool would show more volumes. Depending on the underlying details of the investigation, relevant portions need to be analyzed. In the following example, by examining the folders present under com.android.browser, we can extract the list of various sites visited by the user along ...
Read now
Unlock full access