Notifications
Clear all
General (Technical, Procedural, Software, Hardware etc.)
3
Posts
2
Users
0
Reactions
536
Views
Topic starter
07/03/2017 3:22 am
Dear,
Is it posible to know who or how a factory reset was done in an Android 6.0 phone?
I´m in a case and I´m asked to answer if the factory reset was done by a Malware o by the user.
I did file carving but I can not find any artifact.
I tried to investigate in Cache/Root/recovery/last_log
Any idea?
Thanks in advance
07/03/2017 3:50 pm
Did you create the physical dump of the device?
Topic starter
07/03/2017 8:37 pm
Hi,
Yes I got a physical dump of the device via dd