Information Technology Reference
In-Depth Information
Summary
Recovery of the deleted data on Android devices depends on various factors which heavily
rely on access to the data residing in the internal memory and SD card. While the recovery
of deleted items from external storage such as an SD card is easy, recovery of deleted items
from the internal memory takes considerable effort. SQLite file parsing and file-carving
techniques are two methods to recover deleted data extracted from an Android device. The
next chapter discusses Android forensic tools that can be helpful in extracting and acquir-
ing data from Android devices. Both open source and commercial methods will be dis-
cussed.
