Android Mobile Forensic Sciences Research

摘要

According to the characteristics of electronic evidence, the storage mechanisms of Android phone and specific operational problems encountered in forensic work are summarized. This article presents a relatively standardized evidence-based policy Android phones, hoping to improve the Android mobile phone forensics operating procedures and rules for the operation to extract the maximum extent possible traces left in the phone, while reducing or avoiding contamination of the phone caused the original data when extracting data.