Information Technology Reference
In-Depth Information
dalvik-cache
data
dontpanic
drm
local
lost+found
misc
property
resource-cache
system
system.notfirstrun
user
•
/cache
: This is the folder used to store frequently accessed data and some of the
logs for faster retrieval. The
cache
partition is also important to the forensic in-
vestigation as the data residing here may no longer be present in the
/data
parti-
tion.
•
/misc
: As the name suggests, this folder contains information about miscel-
laneous settings. These settings mostly define the state of the device, that is On/
Off. Information about hardware settings, USB settings, and so on, can be ac-
cessed from this folder.
