Chapter 7. Understanding Android

In the previous chapters, we covered details about iOS devices, including the file system structure, key artifacts, backup files, and acquisition and analysis methods. Starting with this chapter, we will focus on the Android platform and how to perform forensics on Android devices. Having a good understanding of the Android ecosystem, security constraints, file systems, and other features proves useful during forensic investigation. Gaining knowledge of these fundamentals would help a forensic expert to take informed decisions while conducting an investigation.

We will cover the following topics in this chapter:

  • Android models
  • Android security
  • The Android file hierarchy
  • The Android file system

The evolution of Android ...

Get Practical Mobile Forensics - Second Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.