Course Curriculum
-
01
INTRODUCTION
-
Introduction
-
-
02
ABOUT ANDROID
-
About Android
-
File System Structure
-
File Types
-
File Types - Video
-
Credential Encrypted Vs Device Encrypted Storage
-
CE vs DE - Video
-
Multi-User Environment
-
Knowledge Check
-
Adoptable Storage
-
Android Forensic Location Guide
-
-
03
BROWSER
-
Browser
-
Chrome Artifacts - Video
-
Browser Lab
-
Browser Lab Walkthrough
-
-
04
LOCATION
-
Location
-
Knowledge Check
-
-
05
MEDIA
-
Photo
-
Android Media - Video
-
Motion Photo
-
Motion Photo - Video
-
Knowledge Check
-
Media Lab
-
Media Lab Walkthrough
-
-
06
MAIL
-
Mail
-
Mail Lab
-
Mail Lab Walkthrough
-
-
07
COMMUNICATION
-
SMS
-
Call Logs
-
Contacts
-
Knowledge Check
-
Communication Lab
-
Communication Lab Walkthrough
-
-
08
SYSTEM ARTIFACTS
-
Android Build.prop
-
Installed Application
-
Installed Applications - Video
-
Application Lab
-
Application Lab Walkthrough
-
Logical Vs Full File System
-
Runtime Permission
-
Factory Reset
-
System Artifacts Lab
-
System Artifacts Lab Walkthrough
-
Shutdown
-
Calendar
-
Battery Stats
-
BatterystatsdumpsysTask
-
Usage Stats
-
Wellbeing Dashboard
-
Privacy Dashboard
-
Knowledge Check
-
-
09
CONNECTIONS
-
Wearable and Bluetooth
-
Knowledge Check
-
WiFi Connection
-
WiFi Connection - Video
-
-
10
REFERENCES
-
References
-
Learning Outcomes
After completing this course, you will learn the following:
-
Gain understanding on the Android file structure.
-
Learn key artifacts for analysis on an Android device.
-
Understand difference in artifacts with shared data, example photo versus motion photo, Google Chrome application data versus Google Chrome browser data.
Technical Requirements
-
In this course you would need to have a basic understanding of mobile analysis, including timestamps and basic file system knowledge.
-
Autopsy
-
ALEAPP
-
Andriller
-
HxD
-
DB Browser for SQLite
What is next at Cyber 5W?
Add your email to the mailing list to get the latest updates