Mobile devices contain a wealth of valuable information, but the challenge is knowing how to retrieve the data. Investigators seem to have image acquisition covered with tools like Cellebrite’s UFED, but want to know how to pull more evidence from third-party apps.
With this in mind, we’ve put together step by step instructions on how to use IEF and Cellebrite together to acquire and analyze Android devices, including physical acquisitions, file system extractions and quick file dumps…