Chapter 8. Android Forensic Tools Overview

This chapter is an overview of the free and open source Android forensic tools and will show you how to use these tools for common investigative scenarios. By the end of this chapter, the reader should be familiar with the following tools:

  • ViaExtract
  • Autopsy
  • ViaLab

ViaExtract

ViaExtract is a logical and physical extraction tool created by NowSecure (formerly known as ViaForensics). Logical acquisitions (including backups) are available with the free version, while the paid version adds physical extractions. It is freely distributed inside of a virtual machine file (either VMWare or Virtual Box formats) running NowSecure's Santoku Linux distribution. An active Internet connection is required while using the ...

Get Learning Android Forensics now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.