Switch to full style
Anything related to computer forensics (new section!)
Post a reply

Android Forensic

May 10th, 2014, 15:55

Hi all,
How can I image internal memory of Android phone with FTK imager or any imaging tools?

Thanks

Re: Android Forensic

May 12th, 2014, 11:13

FTK Imager does not support imaging of Android or other smartphones. For Access Data solution, try MPE+. EnCase version 7 does an okay job of imaging Android devices. I typically have the best luck (with few exceptions) using Cellebrite. Paraben and XRY also have some pretty good tools for imaging Android.

If none of these are an option for you, post the make and model of the phone with the goal (why do you want to image it and what do you want to get out of the image).

Re: Android Forensic

May 13th, 2014, 6:28

Thanks TXRanger

I generally want to image for recovery solution.
At this time I have not those tools, and I know about them.

Re: Android Forensic

May 13th, 2014, 15:59

The other ways I know either require the Android device to be rooted or install additional software - neither of these are good for a data recovery scenario. Data recovery tools are usually not cheap or free so to do it right you will need to invest in some equipment, or partner / outsource with somebody who has the equipment. Good luck!
Post a reply