January 2018
Beginner to intermediate
402 pages
10h 6m
English
Accessing the call logs of a phone is often required during the investigation to confirm certain events. The information about call logs is stored in the contacts2.db file located at /data/data/com.android.providers.contacts/databases/. As mentioned earlier, you can use SQLite Browser to see the data present in this file after extracting it to a local folder on the forensic workstation. As shown in the following screenshot, using the adb pull command, the necessary .db files can be extracted to a folder on the forensic workstation:

Note that applications used to make calls ...
Read now
Unlock full access