作者: Timothy Vidas , Chengye Zhang , Nicolas Christin
DOI: 10.1016/J.DIIN.2011.05.003
关键词:
摘要: The Android platform has been deployed across a wide range of devices, predominately mobile phones, bringing unprecedented common software features to diverse set devices independent carrier and manufacturer. Modern digital forensics processes differentiate collection analysis, with ideally only occurring once the subsequent analysis relying upon proper collection. After exploring special device boot modes Android's partitioning schema we detail composition an bootable image discuss creation such designed for forensic major contribution this paper is general process data related results experiments carried out on several specific devices.