Practical Mobile Forensics - Fourth Edition

Summary

In this chapter, we learned how to set up a proper forensic workstation before conducting investigations on an Android device. Start with a sterile forensic workstation that has the necessary basic software and device drivers installed on it. If the method of forensic acquisition requires the Android device to be unlocked, you need to determine the best method by which to gain access to the device. If the device has the USB debugging feature enabled, then bypassing the screen-lock is just a cakewalk. We learned about the various screen lock bypass techniques and helped you to determine which one to use under different circumstances. Depending on the forensic acquisition method and the scope of the investigation, rooting the device ...