Notifications
Clear all
General (Technical, Procedural, Software, Hardware etc.)
3
Posts
2
Users
0
Likes
344
Views
Topic starter
Dear,
Is it posible to know who or how a factory reset was done in an Android 6.0 phone?
I´m in a case and I´m asked to answer if the factory reset was done by a Malware o by the user.
I did file carving but I can not find any artifact.
I tried to investigate in Cache/Root/recovery/last_log
Any idea?
Thanks in advance
Posted : 07/03/2017 2:22 am
Did you create the physical dump of the device?
Posted : 07/03/2017 2:50 pm
Topic starter
Hi,
Yes I got a physical dump of the device via dd
Posted : 07/03/2017 7:37 pm