January 2018
Beginner to intermediate
402 pages
10h 6m
English
Recovering files that are deleted from Android's internal memory (such as SMS, contacts, app data, and more) is not supported by all analytical tools and may require manual carving. Unlike some media containing common file systems, such as SD cards, the file system may not be recognized and mounted by forensic tools. Also, the examiner cannot get access to the raw partitions of the internal memory of an Android phone unless the phone is rooted. The following are some of the other issues that the examiner may face when attempting to recover data from the internal memory on Android devices:
Read now
Unlock full access