Performance of android forensics data recovery tools

Ogazi-Onyemaechi, BC, Dehghantanha, A ORCID: https://orcid.org/0000-0002-9294-7554 and Choo, KRR 2016, 'Performance of android forensics data recovery tools' , in: Contemporary Digital Forensic Investigations of Cloud and Mobile Applications , Elsevier, pp. 91-110.

PDF - Accepted Version Restricted to Repository staff only Download (1MB)

Abstract

Recovering deleted or hidden data is among the most important duties of forensics investigators. Extensive utilization of smartphones as subject, objects, or tools of crime made them an important part of residual forensics. This chapter investigates the effectiveness of mobile forensic data recovery tools in recovering evidences from a Samsung Galaxy S2 i9100 Android phone. We seek to determine the amount of data that could be recovered using Phone image carver, Access data FTK, Foremost, Diskdigger, and Recover My File forensic tools. The findings reflected the difference between recovery capacities of studied tools showing their suitability in their specialized contexts only.

Item Type:	Book Section
Editors:	Choo, KRR and Dehghantanha, A
Schools:	Schools > School of Computing, Science and Engineering > Salford Innovation Research Centre (SIRC)
Publisher:	Elsevier
ISBN:	9780128053034
Related URLs:	Publication
Funders:	Non funded research
Depositing User:	Dr. Ali Dehghantanha
Date Deposited:	31 Oct 2016 14:22
Last Modified:	09 May 2019 08:01
URI:	http://usir.salford.ac.uk/id/eprint/40502

Actions (login required)

Edit record (repository staff only)