January 2018
Beginner to intermediate
402 pages
10h 6m
English
book
Practical Mobile Forensics - Third Edition
by Rohit Tamma, Oleg Skulkin, Heather Mahalik, Satish Bommisetty
Content preview from Practical Mobile Forensics - Third Edition
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
Start your free trial
ADB backup extraction
Starting from Android 4.0, Google implemented the adb backup functionality, which allows users to back up application data to a computer using the adb tool. This process does not require root access and, hence, can be very useful during forensic examination. The main drawback is that it does not back up every application installed on the device. The backup feature is application dependent, as the owner of the application can choose to allow backups. Backups are allowed by default, but the developer can disable it if he wants to. Hence, most third-party apps have this enabled and thus, the adb backup command will work for them. Here is the syntax for the adb backup command:
adb backup [-f <file>] [-apk|-noapk] [-shared|-noshared] ...