Information Technology Reference
In-Depth Information
A forensic environment setup
Setting up a proper lab environment is an essential part of a forensic process. Android
forensic setup usually involves the following:
• Start with a fresh or forensically sterile computer environment. This means that
other data is not present on the system or is contained in a manner that it cannot
contaminate the present investigation.
• Install basic software necessary to connect to the device. Android forensic tools
and methodologies will work on Windows, Linux, and OS X platforms.
• Obtain access to the device. An examiner must be able to enable settings or bypass
them in order to allow the data to be extracted from the Android device.
• Issue commands to the device through the methods defined in this chapter and in
The following sections provide guidance on setting up a basic Android forensic worksta-
tion.
