Forensic of an unrooted mobile device

摘要

With the people switching over to mobiles for all their computing needs, these ubiquitous devices have become huge data warehouses. In order to extract the required data, the inbuilt critical security mechanism of the device needs to be bypassed. With increased device security being implemented in latest android versions, gaining root access is a huge challenge. The research addresses the issue of getting data from smart phone without performing the rooting operation and without enabling USB debugging, which is one of the key challenges for mobile forensics. This paper proposes a mechanism to extract data by flashing team win recovery project (TWRP) on the device after unlocking the boot loader.