Practical Mobile Forensics - Fourth Edition

Android Data Analysis and Recovery

In the previous chapter, we covered various logical and physical extraction techniques. In physical extraction, a bit-by-bit image of the Android device is obtained, which contains valuable information. In this chapter, we will learn how to analyze and extract relevant data, such as call logs and text messages, from an image file. While the data extraction and analysis techniques provide information about various details, not all techniques can provide information about the deleted data. Data recovery is a crucial aspect of mobile forensics, as it helps to unearth the deleted items.

This chapter aims at covering various techniques, that can be used by a forensic analyst to recover the data from an Android ...