Practical Mobile Forensics - Fourth Edition

Extracting device information

Knowing the details of your Android device, such as the model, version, and more, will aid your investigation. For example, when the device is physically damaged and this prohibits the examination of the device information, you can grab details about the device by executing the following command under the /system folder:

# cat build.prop

This can be seen in the following screenshot:

The build.prop file

After extracting device information, we will now extract call logs.