Android Forensics

Chapter 7

Android application and forensic analysis

Information in this chapter

• Analysis techniques

• FAT forensic analysis

• YAFFS2 forensic analysis

• Android app analysis and reference

Introduction

A lot of material has been discussed up to this point in the book covering not only the history and architecture of Android devices but also complete details on the file systems, ways to secure devices, and methodology to acquire data from them. But data without context and analysis is just noise. Many of the techniques used in traditional forensic investigations are applicable in Android forensics analysis.

Analysis techniques

This section will provide an overview of the analysis techniques followed by sections that demonstrate the procedures ...