Practical Mobile Forensics - Third Edition

Logical data extraction

Logical data extraction techniques extract the data present on the device by interacting with the operating system and by accessing the file system. These techniques are significant, because they provide valuable data, work on most devices, and are easy to use. Once again, the concept of rooting comes into the picture while extracting the data. Logical techniques do not actually require root access for data extraction. However, having root access on a device allows you to access all the files present on a device. This means that some data may be extracted on a non-rooted device while root access will open the device and provide access to all the files present on the device. Hence, having root access to a device would ...