Hello,
I am a student of digital forensics at Champlain College in Vermont. We are having a discussion about finding remnants of an SD card being previously used in an Android device. Does anyone know if there is a location that will tell us any past usages of an SD card in an Android device to store pictures or other data?
I'm thinking something along the lines of the Windows registry key for USB device history HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\USBSTOR
Any help is greatly appreciated.
Best,
BS
Hi there,
only thing I can think of is checking the mouting points in file system.
Otherwise there is no indication. Mounting points used to be in vold.fstab but Google has changed something since Kitkat iirc, google it. Of course you need to be rooted to access system files.
Roger that, Thanks Bendroid.