Course Curriculum

  • 01

    INTRODUCTION

    • Introduction
  • 02

    ABOUT ANDROID

    • About Android

    • File System Structure

    • File Types

    • File Types - Video

    • Credential Encrypted Vs Device Encrypted Storage

    • CE vs DE - Video

    • Multi-User Environment

    • Knowledge Check

    • Adoptable Storage

    • Android Forensic Location Guide
  • 03

    BROWSER

    • Browser

    • Chrome Artifacts - Video

    • Browser Lab

    • Browser Lab Walkthrough
  • 04

    LOCATION

    • Location

    • Knowledge Check
  • 05

    MEDIA

    • Photo

    • Android Media - Video

    • Motion Photo

    • Motion Photo - Video

    • Knowledge Check

    • Media Lab

    • Media Lab Walkthrough
  • 06

    MAIL

    • Mail

    • Mail Lab

    • Mail Lab Walkthrough
  • 07

    COMMUNICATION

    • SMS

    • Call Logs

    • Contacts

    • Knowledge Check

    • Communication Lab

    • Communication Lab Walkthrough
  • 08

    SYSTEM ARTIFACTS

    • Android Build.prop

    • Installed Application

    • Installed Applications - Video

    • Application Lab

    • Application Lab Walkthrough

    • Logical Vs Full File System

    • Runtime Permission

    • Factory Reset

    • System Artifacts Lab

    • System Artifacts Lab Walkthrough

    • Shutdown

    • Calendar

    • Battery Stats

    • BatterystatsdumpsysTask

    • Usage Stats

    • Wellbeing Dashboard

    • Privacy Dashboard

    • Knowledge Check
  • 09

    CONNECTIONS

    • Wearable and Bluetooth

    • Knowledge Check

    • WiFi Connection

    • WiFi Connection - Video
  • 10

    REFERENCES

    • References

Learning Outcomes

After completing this course, you will learn the following:

  • Gain understanding on the Android file structure.

  • Learn key artifacts for analysis on an Android device.

  • Understand difference in artifacts with shared data, example photo versus motion photo, Google Chrome application data versus Google Chrome browser data.

Technical Requirements

  • In this course you would need to have a basic understanding of mobile analysis, including timestamps and basic file system knowledge.

  • Autopsy

  • ALEAPP

  • Andriller

  • HxD

  • DB Browser for SQLite

Testimonials

“If you are conducting analysis of Android devices, you need to take @hexordia ’s HEX-210 Android Analysis course. This course is as good as any I’ve previously taken on android analysis. Great content and simplicity in the explanations make it great for beginners.
Here ”

Ricky Johnson

What is next at Cyber 5W?

Add your email to the mailing list to get the latest updates