Information Technology Reference
In-Depth Information
unless all other forensic methods fail. Should the examiner elect to root an Android
device, the methods must be well documented and tested prior to attempting it on real
evidence. Rooting will be discussed at the end of this chapter.
On the workstation where the Android SDK is installed,
adbd
will run as a background
process. Also, on the same workstation a client program will run, which can be invoked
from a shell by issuing the
adb
command. When the adb client is started, it first checks if
an adb daemon is already running. If the response is negative, it initiates a new process to
start the adb daemon. The adb client program communicates with local
adbd
over port
5037
.
