Hi All,
I am new to mobile forensic and currently faced with an extremely tough case were i actually need to take a look at the file systems and hives for an Android device.
The device is an HTC A8181 Desire that i have imaged (physical) using the UFED.
I need to establish the following
1. if any device were connected to the phone (via bluetooh and Physically to the phone) yes physically as well as he user noticed a usb drive was connected to the phone
2. Identify if any data was transferred on or off the phone
3. If the device was reset.
At this stage i have no idea on where to begin. Is there a log file that maintains a record of these activities? If so please can you point me to these files.
I have checked some of the DB files located but could not establish anything.
Please Help.
Thanks