Conceptual evidence collection and analysis methodology for Android devices

摘要

Android devices continue to grow in popularity and capability meaning theneed for a forensically sound evidence collection methodology for these devicesalso increases. This chapter proposes a methodology for evidence collection andanalysis for Android devices that is, as far as practical, device agnostic.Android devices may contain a significant amount of evidential data that couldbe essential to a forensic practitioner in their investigations. However, theretrieval of this data requires that the practitioner understand and utilizetechniques to analyze information collected from the device. The majorcontribution of this research is an in-depth evidence collection and analysismethodology for forensic practitioners.