Information Technology Reference
In-Depth Information
plays the list of available file systems on the device. The following command shows all
information about the CPU of the device:
shell@Android:/ $ cat /proc/cpuinfo
cat /proc/cpuinfo
Processor : ARMv7 Processor rev 0 (v7l)
processor : 0
BogoMIPS : 1592.52
processor : 3
BogoMIPS : 2786.91
Features : swp half thumb fastmult vfp edsp neon
vfpv3 tls
CPU implementer : 0x41
CPU architecture: 7
CPU variant : 0x3
CPU part : 0xc09
CPU revision : 0
Chip revision : 0011
Hardware : SMDK4x12
Revision : 000c
Serial : ****************
Similarly, there are many other useful files that provide valuable information when you
traverse through them.
The
tmpfs
file system is a temporary storage facility on the device that stores the files in
RAM (volatile memory). The main advantage of using RAM is faster access and retrieval.
But once the device is restarted or switched off, this data will not be accessible anymore.
Hence, it's important for a forensic investigator to examine the data in RAM before a
device reboot happens or extract the data via RAM acquisition methods.
