android

Discover New Forensic Evidence with File Structure Analysis

Forensic analysts can discover new evidence in their existing acquisitions by searching through known file structures for responsive artifact/data types leveraging the free forensic tool ftree.

Continue reading

Android Forensics Techniques - Introduction

This section of my Android Forensic Techniques chapter provides an introduction to the different types of forensics investigations, the differences between logical and physical techniques and some thoughts on a key challenge in mobile forensics - imaging without modifying the device.

Continue reading

Android Forensics Techniques - Procedures

This section of my Android Forensics Techniques chapter covers the procedures for handling an Android device including pass code procedures, network isolation, power issues and how techniques to circumvent the pass code.

Continue reading