Who perform a facto...
 
Notifications
Clear all

Who perform a factory reset?

3 Posts
2 Users
0 Likes
344 Views
(@forensicandy)
Posts: 3
New Member
Topic starter
 

Dear,

Is it posible to know who or how a factory reset was done in an Android 6.0 phone?

I´m in a case and I´m asked to answer if the factory reset was done by a Malware o by the user.

I did file carving but I can not find any artifact.

I tried to investigate in Cache/Root/recovery/last_log

Any idea?

Thanks in advance

 
Posted : 07/03/2017 2:22 am
Igor_Michailov
(@igor_michailov)
Posts: 529
Honorable Member
 

Did you create the physical dump of the device?

 
Posted : 07/03/2017 2:50 pm
(@forensicandy)
Posts: 3
New Member
Topic starter
 

Hi,

Yes I got a physical dump of the device via dd

 
Posted : 07/03/2017 7:37 pm
Share: