Mobile Forensics
Mobile Forensics
Mobile Forensics
  • Introduction
  • Preparations
    • Knowledge
    • Safety
    • Trust
    • Backup
  • Methodology
  • Checking Windows Computers
    • Review Programs Launching at Startup
    • Review Running Processes
    • Review Network Connections
    • Extract Data for Further Analysis
  • Checking Mac Computers
    • Review Programs Launching at Startup
    • Review Running Processes
    • Review Kernel Extensions
    • Review Network Connections
    • Review XProtect Logs
    • Extract Data for Further Analysis
  • Checking Smartphones
    • Note: curriculum
    • Smartphone System Architecture
    • Check Devices Linked to Chat Applications
    • Check for Suspicious Messages
    • Monitor Network Traffic
    • Note: Monitoring Network Traffic on Linux
  • Checking Android Devices Basic
    • Review Installed Applications
    • Check Storage
    • Check if the Phone is under Android Device Policy
    • Check if the Phone is Rooted
    • Check if Developer Options is Enabled
    • Analyze Applications
    • Extract Data for Further Analysis
    • Optional : Check for Indicators of Stalkerware Installation
  • Checking Android Devices Advanced
    • Wireshark
    • MVT
    • Other Tools
  • Checking iOS Devices
    • Review iCloud Accounts
    • Review Installed Applications
    • Check for Mobile Device Management Profiles
    • Check for Shortcuts
    • Check for Jailbreaks
    • Enable and Check App Privacy Report
    • Extract Data for Further Analysis
    • Analyzing Extracted Data
    • About Lockdown Mode
  • Checking Devices Remotely
    • Mac Computers
    • Android
  • Concluding a Forensic Gathering
  • References and Further Learning
  • License and Credits
Powered by GitBook
On this page
  • androidqf - Android Quick Forensics
  • Alternatives
  1. Checking Android Devices Basic

Extract Data for Further Analysis

PreviousAnalyze ApplicationsNextOptional : Check for Indicators of Stalkerware Installation

Last updated 10 months ago

In this section we introduce a few tools that collects device information or backups that could be sent to experts for analysis.

- Android Quick Forensics

androidqf is an easy-to-use desktop application that collects system and app information and outputs them into a files that could be sent to experts for further analysis. Follow the official instructions to operate.

Alternatives

Alternative ways to generate device backups. Backups generated using these tools contain less useful information, so should be used only in case when androidqf isn't usable.

  • Using vendor backup apps such as Samsung's .

  • Using generic backup programs such as .

androidqf
Smart Switch
Open Android Backup