Title : Android Forensics Tutorial – Part 1 Android Directory Structure
link : Android Forensics Tutorial – Part 1 Android Directory Structure
Android Forensics Tutorial – Part 1 Android Directory Structure
Android Forensics Tutorial – Part 1 Android Directory Structure
Android forensics is different from regular operating system or disk forensics because of various reasons. It supports multiple file systems which are specific to Android only. We may look for the following data on Android devices: SMS, MMS, emails, call logs, contacts, photos, calendars, notes, browser history, GPS locations, passwords, data stored on SD cards, etc.
So for extracting above mentioned data, it is important to understand file systems, directory structures, and how and where the data is stored on the devices before getting into actual forensics. So let’s start learning about Android Forensics…
Directory Structure of Android Operating System:
Android OS got its own directory structure which is specific to android only. We can look at android directory structure using “adb shell” or “DDMS” or something similar, there are lot of such small scripts in the market, you can easily find out using Google.Note: Directory structure of Android can vary from device to device.
Below is sample directory structure of “SONY XPERIA E” device using “adb shell”:
The above screenshot shows different files and folders on device. Now we want to know about data and folder which matters most for forensic analysts. Below are some most important places a forensic expert has to look upon:
- /system (system directory where operating system code exists)
- /data (it contains user specific data basically profile specific like data stored by SMS or MMS application, we can also see executable files of all applications at location “/data/app” directory but it requires root privileges i.e. a user without rooted device can’t see content of this directory. I have more for your guys. “/data/data/[app_package]/” directory is a place where user data for that application resides. But due to security reasons, data in each directory cannot be accessed by other applications. But there are multiple ways of doing that also which we will learn in later tutorials.)
- /sdcard (it is basically used for external storage where images, music files etc are stored but in our case (i.e. sony xperia) it stands for internal storage. So you need to debug more about /sdcard and /ext_card directories.)
That was all about android directory structures. We will learn more about Android Forensics – Hacker’s Guide Part -2 tomorrow.
Keep Learning !! Keep Connected!!
Android Forensics Tutorial – Part 1 Android Directory Structure
That is all article Android Forensics Tutorial – Part 1 Android Directory Structure for this time, hopefully can provide benefits to you all. wait for the next article, And Thanks to the various sources that we Copas article without permission, I hope you can tolerate and understand each other.
You are now read the article Android Forensics Tutorial – Part 1 Android Directory Structure with the link url http://freshgamesreview.blogspot.com/2016/07/android-forensics-tutorial-part-1.html
0 Response to "Android Forensics Tutorial – Part 1 Android Directory Structure"
Post a Comment