Chapter 6. Recovering Deleted Data from an Android Device
The extraction and acquisition techniques that you have learned so far will help you access various details such as call logs, messages, and so on. However, these techniques do not help us see the data that is deleted from the device. In this chapter, you will learn about data-recovery techniques that will enable you to view the data that is deleted on the device. Deleted data could contain highly sensitive information, and thus, data recovery is a crucial aspect of mobile forensics. In this chapter, we will cover the following topics:
- An overview of data recovery
- Recovering data deleted from an SD card
- Recovering data deleted from a phone's internal storage
An overview of data recovery
Data ...
Get Learning Android Forensics now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
