Practical Mobile Forensics - Third Edition

ADB dumpsys extraction

The adb dumpsys command allows you to gather information about services and applications running on the system. The adb shell dumpsys command gives diagnostic output for all system services. The dumpsys command does not require root privileges to be executed and requires only USB debugging to be enabled as with any other adb command. As shown in the following screenshot, to see the list of all services that you can use with dumpsys, run the / command:

The dumpsys service list command

Analyzing certain dumpsys services, such as Wi-Fi, user, notification and so on, can be helpful in certain scenarios. Here are some of ...