René's URL Explorer Experiment


Title: GitHub - RealityNet/Android-Forensics-References · GitHub

Open Graph Title: GitHub - RealityNet/Android-Forensics-References

X Title: GitHub - RealityNet/Android-Forensics-References

Description: Contribute to RealityNet/Android-Forensics-References development by creating an account on GitHub.

Open Graph Description: Contribute to RealityNet/Android-Forensics-References development by creating an account on GitHub.

X Description: Contribute to RealityNet/Android-Forensics-References development by creating an account on GitHub.

Opengraph URL: https://github.com/RealityNet/Android-Forensics-References

X: @github

direct link

Domain: github.com

route-pattern/:user_id/:repository
route-controllerfiles
route-actiondisambiguate
fetch-noncev2:b81f86d6-53be-eedb-de18-9cddf6384d84
current-catalog-service-hashf3abb0cc802f3d7b95fc8762b94bdcb13bf39634c40c357301c4aa1d67a256fb
request-id95AE:171177:341FAB:491739:6A4D1A33
html-safe-nonce58ac8c8102916356812be12ed196187a74824dd07ae330aeaea2c95b51f311b6
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI5NUFFOjE3MTE3NzozNDFGQUI6NDkxNzM5OjZBNEQxQTMzIiwidmlzaXRvcl9pZCI6IjU5NTkxNzI1NDU1MDg2MTI2NTkiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ==
visitor-hmacadfa0b92a8eab6eb335836def60fa3b06d46ad251e8365f56c3e4ee71a807406
hovercard-subject-tagrepository:533161728
github-keyboard-shortcutsrepository,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location//
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/RealityNet/Android-Forensics-References
twitter:imagehttps://opengraph.githubassets.com/b000f45eb2f6502eca95fbaad3be329f22eb8f9d3cd82cd382eef7927d22618f/RealityNet/Android-Forensics-References
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/b000f45eb2f6502eca95fbaad3be329f22eb8f9d3cd82cd382eef7927d22618f/RealityNet/Android-Forensics-References
og:image:altContribute to RealityNet/Android-Forensics-References development by creating an account on GitHub.
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
Nonebcb4661e6fb4fe8b394c51ea02ccdb2236d40dc59afc75a3bbba50bf6517134c
turbo-cache-controlno-cache
go-importgithub.com/RealityNet/Android-Forensics-References git https://github.com/RealityNet/Android-Forensics-References.git
octolytics-dimension-user_id16462377
octolytics-dimension-user_loginRealityNet
octolytics-dimension-repository_id533161728
octolytics-dimension-repository_nwoRealityNet/Android-Forensics-References
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id533161728
octolytics-dimension-repository_network_root_nwoRealityNet/Android-Forensics-References
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
releasefb70bd3c4b2bec429781b65419e912c66e2d5581
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/RealityNet/Android-Forensics-References#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FRealityNet%2FAndroid-Forensics-References
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FRealityNet%2FAndroid-Forensics-References
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E&source=header-repo&source_repo=RealityNet%2FAndroid-Forensics-References
Reloadhttps://github.com/RealityNet/Android-Forensics-References
Reloadhttps://github.com/RealityNet/Android-Forensics-References
Reloadhttps://github.com/RealityNet/Android-Forensics-References
Please reload this pagehttps://github.com/RealityNet/Android-Forensics-References
RealityNet https://github.com/RealityNet
Android-Forensics-Referenceshttps://github.com/RealityNet/Android-Forensics-References
Notifications https://github.com/login?return_to=%2FRealityNet%2FAndroid-Forensics-References
Fork 39 https://github.com/login?return_to=%2FRealityNet%2FAndroid-Forensics-References
Star 355 https://github.com/login?return_to=%2FRealityNet%2FAndroid-Forensics-References
Code https://github.com/RealityNet/Android-Forensics-References
Issues 2 https://github.com/RealityNet/Android-Forensics-References/issues
Pull requests 0 https://github.com/RealityNet/Android-Forensics-References/pulls
Actions https://github.com/RealityNet/Android-Forensics-References/actions
Projects https://github.com/RealityNet/Android-Forensics-References/projects
Security and quality 0 https://github.com/RealityNet/Android-Forensics-References/security
Insights https://github.com/RealityNet/Android-Forensics-References/pulse
Code https://github.com/RealityNet/Android-Forensics-References
Issues https://github.com/RealityNet/Android-Forensics-References/issues
Pull requests https://github.com/RealityNet/Android-Forensics-References/pulls
Actions https://github.com/RealityNet/Android-Forensics-References/actions
Projects https://github.com/RealityNet/Android-Forensics-References/projects
Security and quality https://github.com/RealityNet/Android-Forensics-References/security
Insights https://github.com/RealityNet/Android-Forensics-References/pulse
https://github.com/RealityNet/Android-Forensics-References
Brancheshttps://github.com/RealityNet/Android-Forensics-References/branches
Tagshttps://github.com/RealityNet/Android-Forensics-References/tags
https://github.com/RealityNet/Android-Forensics-References/branches
https://github.com/RealityNet/Android-Forensics-References/tags
48 Commitshttps://github.com/RealityNet/Android-Forensics-References/commits/main/
https://github.com/RealityNet/Android-Forensics-References/commits/main/
README.mdhttps://github.com/RealityNet/Android-Forensics-References/blob/main/README.md
README.mdhttps://github.com/RealityNet/Android-Forensics-References/blob/main/README.md
READMEhttps://github.com/RealityNet/Android-Forensics-References
https://github.com/RealityNet/Android-Forensics-References#android-forensics-references
https://github.com/RealityNet/Android-Forensics-References#userdata-partition
https://github.com/RealityNet/Android-Forensics-References#log-folder
https://cellebrite.com/en/cellebrite-ctf-2023-recap-sharons-android/https://cellebrite.com/en/cellebrite-ctf-2023-recap-sharons-android/
https://www.stark4n6.com/2021/10/cellebrite-ctf-2021-heisenbergs-android.htmlhttps://www.stark4n6.com/2021/10/cellebrite-ctf-2021-heisenbergs-android.html
https://cellebrite.com/en/part-1-walk-through-of-answers-to-the-2021-ctf-investigating-heisenbergs-android-device/https://cellebrite.com/en/part-1-walk-through-of-answers-to-the-2021-ctf-investigating-heisenbergs-android-device/
https://instatronic.com/artefacts-of-android-device-power-off-due-to-depleted-batteryhttps://instatronic.com/artefacts-of-android-device-power-off-due-to-depleted-battery
https://www.magnetforensics.com/blog/8-log-files-you-can-collect-from-ios-and-android-devices/https://www.magnetforensics.com/blog/8-log-files-you-can-collect-from-ios-and-android-devices/
https://thebinaryhick.blog/2024/04/07/__trashed/https://thebinaryhick.blog/2024/04/07/__trashed/
https://www.stark4n6.com/2021/10/samsung-power-off-reset-logs.htmlhttps://www.stark4n6.com/2021/10/samsung-power-off-reset-logs.html
https://www.magnetforensics.com/blog/8-log-files-you-can-collect-from-ios-and-android-devices/https://www.magnetforensics.com/blog/8-log-files-you-can-collect-from-ios-and-android-devices/
https://www.stark4n6.com/2021/10/cellebrite-ctf-2021-heisenbergs-android.htmlhttps://www.stark4n6.com/2021/10/cellebrite-ctf-2021-heisenbergs-android.html
https://instatronic.com/artefacts-of-android-device-power-off-due-to-depleted-batteryhttps://instatronic.com/artefacts-of-android-device-power-off-due-to-depleted-battery
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/powerOffReset.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/powerOffReset.py
https://github.com/RealityNet/Android-Forensics-References#misc-and-misc_de-folder
https://belkasoft.com/android-system-artifacts-devicehttps://belkasoft.com/android-system-artifacts-device
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/adb_hosts.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/adb_hosts.py
https://dfrws.org/sites/default/files/session-files/2015_EU_paper-investigating_evidence_of_mobile_phone_usage_by_drivers_in_road_traffic_accidents.pdfhttps://dfrws.org/sites/default/files/session-files/2015_EU_paper-investigating_evidence_of_mobile_phone_usage_by_drivers_in_road_traffic_accidents.pdf
https://andriotisp.github.io/assets/pdf/wifs12andrio.pdfhttps://andriotisp.github.io/assets/pdf/wifs12andrio.pdf
https://thebinaryhick.blog/2024/04/16/road-trippin-exploring-bluetooth-call-routes-on-samsung-phones/https://thebinaryhick.blog/2024/04/16/road-trippin-exploring-bluetooth-call-routes-on-samsung-phones/
https://cellebrite.com/en/how-android-bluetooth-connections-can-determine-if-the-hands-of-a-driver-were-on-the-wheel-during-an-accident/https://cellebrite.com/en/how-android-bluetooth-connections-can-determine-if-the-hands-of-a-driver-were-on-the-wheel-during-an-accident/
https://dfir.pubpub.org/pub/6ysxvhvc/release/1https://dfir.pubpub.org/pub/6ysxvhvc/release/1
https://www.stark4n6.com/2021/06/android-bluetooth-connection.htmlhttps://www.stark4n6.com/2021/06/android-bluetooth-connection.html
http://forensafe.com/blogs/Android_Bluetooth.htmlhttp://forensafe.com/blogs/Android_Bluetooth.html
https://thebinaryhick.blog/2024/08/23/not-all-androids-who-wonder-are-lost-a-look-at-androids-find-my-device-network/https://thebinaryhick.blog/2024/08/23/not-all-androids-who-wonder-are-lost-a-look-at-androids-find-my-device-network/
https://belkasoft.com/android-system-artifacts-devicehttps://belkasoft.com/android-system-artifacts-device
https://cts-forensics.com/reports/35550_Web.pdfhttps://cts-forensics.com/reports/35550_Web.pdf
https://cts-forensics.com/reports/36550_Web.pdfhttps://cts-forensics.com/reports/36550_Web.pdf
https://cts-forensics.com/reports/37550_Web.pdfhttps://cts-forensics.com/reports/37550_Web.pdf
https://cts-forensics.com/reports/19-5550_Web.pdfhttps://cts-forensics.com/reports/19-5550_Web.pdf
https://cts-forensics.com/reports/20-5550_Web.pdfhttps://cts-forensics.com/reports/20-5550_Web.pdf
https://cts-forensics.com/reports/21-5550_Web.pdfhttps://cts-forensics.com/reports/21-5550_Web.pdf
https://cts-forensics.com/reports/22-5550_Web.pdfhttps://cts-forensics.com/reports/22-5550_Web.pdf
https://cts-forensics.com/reports/24-5550_Web.pdfhttps://cts-forensics.com/reports/24-5550_Web.pdf
https://medium.com/@williamskosasi/cellebrite-ctf-2021-writeup-b73d821a708https://medium.com/@williamskosasi/cellebrite-ctf-2021-writeup-b73d821a708
https://cellebrite.com/en/part-1-walk-through-of-answers-to-the-2021-ctf-investigating-heisenbergs-android-device/https://cellebrite.com/en/part-1-walk-through-of-answers-to-the-2021-ctf-investigating-heisenbergs-android-device/
https://www.stark4n6.com/2021/10/cellebrite-ctf-2021-heisenbergs-android.htmlhttps://www.stark4n6.com/2021/10/cellebrite-ctf-2021-heisenbergs-android.html
https://www.stark4n6.com/2022/06/cellebrite-ctf-2022-heisenbergs-android.htmlhttps://www.stark4n6.com/2022/06/cellebrite-ctf-2022-heisenbergs-android.html
https://forensafe.com/blogs/Android_Bluetooth.htmlhttps://forensafe.com/blogs/Android_Bluetooth.html
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/bluetoothConnections.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/bluetoothConnections.py
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/last_boot_time.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/last_boot_time.py
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/factory_reset.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/factory_reset.py
https://cts-forensics.com/reports/35550_Web.pdfhttps://cts-forensics.com/reports/35550_Web.pdf
https://cts-forensics.com/reports/36550_Web.pdfhttps://cts-forensics.com/reports/36550_Web.pdf
https://cts-forensics.com/reports/37550_Web.pdfhttps://cts-forensics.com/reports/37550_Web.pdf
https://cts-forensics.com/reports/19-5550_Web.pdfhttps://cts-forensics.com/reports/19-5550_Web.pdf
https://cts-forensics.com/reports/20-5550_Web.pdfhttps://cts-forensics.com/reports/20-5550_Web.pdf
https://cts-forensics.com/reports/21-5550_Web.pdfhttps://cts-forensics.com/reports/21-5550_Web.pdf
https://cts-forensics.com/reports/22-5550_Web.pdfhttps://cts-forensics.com/reports/22-5550_Web.pdf
https://starwarsfan2099.github.io/2020/11/02/cellebirte-ctf-tony.htmlhttps://starwarsfan2099.github.io/2020/11/02/cellebirte-ctf-tony.html
https://thebinaryhick.blog/2021/01/13/clockin-in-with-googles-wear-os/https://thebinaryhick.blog/2021/01/13/clockin-in-with-googles-wear-os/
https://www.packtpub.com/product/learning-android-forensics-second-edition/9781789131017https://www.packtpub.com/product/learning-android-forensics-second-edition/9781789131017
https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
https://blog.digital-forensics.it/2024/02/dissecting-android-wificonfigstorexml.htmlhttps://blog.digital-forensics.it/2024/02/dissecting-android-wificonfigstorexml.html
https://forensafe.com/blogs/Android_wifi_Information.htmlhttps://forensafe.com/blogs/Android_wifi_Information.html
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/wifiConfigstore2.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/wifiConfigstore2.py
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/wifiProfiles.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/wifiProfiles.py
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/wifiHotspot.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/wifiHotspot.py
https://cts-forensics.com/reports/38550_Web.pdfhttps://cts-forensics.com/reports/38550_Web.pdf
https://www.dfirblog.com/cellebrite-2022-ctf-writeup/https://www.dfirblog.com/cellebrite-2022-ctf-writeup/
https://www.stark4n6.com/2022/06/cellebrite-ctf-2022-heisenbergs-android.htmlhttps://www.stark4n6.com/2022/06/cellebrite-ctf-2022-heisenbergs-android.html
https://www.dfirblog.com/cellebrite-2022-ctf-writeup/https://www.dfirblog.com/cellebrite-2022-ctf-writeup/
https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
https://thebinaryhick.blog/2021/01/26/androids-dangerous-permissions/https://thebinaryhick.blog/2021/01/26/androids-dangerous-permissions/
https://blog.d204n6.com/2021/01/android-roles-and-permissions-android.htmlhttps://blog.d204n6.com/2021/01/android-roles-and-permissions-android.html
https://thebinaryhick.blog/2022/04/09/examining-a-malware-infected-android-phone-this-android-is-not-alright/https://thebinaryhick.blog/2022/04/09/examining-a-malware-infected-android-phone-this-android-is-not-alright/
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.htmlhttps://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.html
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/runtimePerms.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/runtimePerms.py
https://blog.d204n6.com/2021/01/android-roles-and-permissions-android.htmlhttps://blog.d204n6.com/2021/01/android-roles-and-permissions-android.html
https://thebinaryhick.blog/2021/01/26/androids-dangerous-permissions/https://thebinaryhick.blog/2021/01/26/androids-dangerous-permissions/
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://www.stark4n6.com/2024/03/magnet-virtual-summit-2024-ctf-android.htmlhttps://www.stark4n6.com/2024/03/magnet-virtual-summit-2024-ctf-android.html
https://m-brumbelow.github.io/posts/MVS2024CTF/https://m-brumbelow.github.io/posts/MVS2024CTF/
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/roles.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/roles.py
https://github.com/RealityNet/Android-Forensics-References#property-folder
https://thebinaryhick.blog/2021/08/19/wipeout-detecting-android-factory-resets/https://thebinaryhick.blog/2021/08/19/wipeout-detecting-android-factory-resets/
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/persistentProp.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/persistentProp.py
https://github.com/RealityNet/Android-Forensics-References#system-system_ce-and-system_de-folders
https://thebinaryhick.blog/2022/01/22/snooping-on-android-12s-privacy-dashboard/https://thebinaryhick.blog/2022/01/22/snooping-on-android-12s-privacy-dashboard/
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.htmlhttps://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.html
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/discreteNative.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/discreteNative.py
https://lijuanru.com/publications/nss18.pdfhttps://lijuanru.com/publications/nss18.pdf
http://newandroidbook.com/Book/2-Excerpt-Data.pdfhttp://newandroidbook.com/Book/2-Excerpt-Data.pdf
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
http://newandroidbook.com/Book/2-Excerpt-Data.pdfhttp://newandroidbook.com/Book/2-Excerpt-Data.pdf
https://www.digitalforensics.com/blog/articles/who-is-the-owner-of-the-mobile-device/https://www.digitalforensics.com/blog/articles/who-is-the-owner-of-the-mobile-device/
https://thebinaryhick.blog/2021/01/13/clockin-in-with-googles-wear-os/https://thebinaryhick.blog/2021/01/13/clockin-in-with-googles-wear-os/
https://www.hecfblog.com/2014/09/super-sunday-funday-forensic-challenge_15.htmlhttps://www.hecfblog.com/2014/09/super-sunday-funday-forensic-challenge_15.html
https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
https://www.stark4n6.com/2022/01/shutdown-checkpoints-in-android-12.htmlhttps://www.stark4n6.com/2022/01/shutdown-checkpoints-in-android-12.html
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/shutdown_checkpoints.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/shutdown_checkpoints.py
https://cts-forensics.com/reports/21-5550_Web.pdfhttps://cts-forensics.com/reports/21-5550_Web.pdf
https://cts-forensics.com/reports/22-5550_Web.pdfhttps://cts-forensics.com/reports/22-5550_Web.pdf
https://hal.archives-ouvertes.fr/hal-03369836/documenthttps://hal.archives-ouvertes.fr/hal-03369836/document
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://blog.digital-forensics.it/2024/01/analysis-of-android-settings-during.htmlhttps://blog.digital-forensics.it/2024/01/analysis-of-android-settings-during.html
https://www.stark4n6.com/2021/10/cellebrite-ctf-2021-heisenbergs-android.htmlhttps://www.stark4n6.com/2021/10/cellebrite-ctf-2021-heisenbergs-android.html
https://cellebrite.com/en/part-1-walk-through-of-answers-to-the-2021-ctf-investigating-heisenbergs-android-device/https://cellebrite.com/en/part-1-walk-through-of-answers-to-the-2021-ctf-investigating-heisenbergs-android-device/
https://thebinaryhick.blog/2022/04/09/examining-a-malware-infected-android-phone-this-android-is-not-alright/https://thebinaryhick.blog/2022/04/09/examining-a-malware-infected-android-phone-this-android-is-not-alright/
https://blog.digital-forensics.it/2024/01/analysis-of-android-settings-during.htmlhttps://blog.digital-forensics.it/2024/01/analysis-of-android-settings-during.html
https://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android.htmlhttps://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android.html
https://belkasoft.com/android-system-artifacts-devicehttps://belkasoft.com/android-system-artifacts-device
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/settingsSecure.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/settingsSecure.py
https://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/notificationHistory.pyhttps://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/notificationHistory.py
https://www.sciencedirect.com/science/article/pii/S2666281722000166https://www.sciencedirect.com/science/article/pii/S2666281722000166
https://forensafe.com/blogs/Android_Wickr.htmlhttps://forensafe.com/blogs/Android_Wickr.html
https://blog.d204n6.com/2021/01/android-roles-and-permissions-android.htmlhttps://blog.d204n6.com/2021/01/android-roles-and-permissions-android.html
https://blog.digital-forensics.it/2024/01/analysis-of-android-settings-during.htmlhttps://blog.digital-forensics.it/2024/01/analysis-of-android-settings-during.html
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://thebinaryhick.blog/2024/04/07/__trashed/https://thebinaryhick.blog/2024/04/07/__trashed/
https://thebinaryhick.blog/2021/08/19/wipeout-detecting-android-factory-resets/https://thebinaryhick.blog/2021/08/19/wipeout-detecting-android-factory-resets/
https://cellebrite.com/en/part-1-walk-through-of-answers-to-the-2021-ctf-investigating-heisenbergs-android-device/https://cellebrite.com/en/part-1-walk-through-of-answers-to-the-2021-ctf-investigating-heisenbergs-android-device/
https://www.jetir.org/papers/JETIR2408628.pdfhttps://www.jetir.org/papers/JETIR2408628.pdf
https://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/errp.pyhttps://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/errp.py
https://thebinaryhick.blog/2022/01/22/snooping-on-android-12s-privacy-dashboard/https://thebinaryhick.blog/2022/01/22/snooping-on-android-12s-privacy-dashboard/
https://thebinaryhick.blog/2021/08/19/wipeout-detecting-android-factory-resets/https://thebinaryhick.blog/2021/08/19/wipeout-detecting-android-factory-resets/
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/appopSetupWiz.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/appopSetupWiz.py
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/appops.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/appops.py
https://www.sciencedirect.com/science/article/pii/S1742287619301628https://www.sciencedirect.com/science/article/pii/S1742287619301628
http://newandroidbook.com/Book/2-Excerpt-Data.pdfhttp://newandroidbook.com/Book/2-Excerpt-Data.pdf
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://par.nsf.gov/servlets/purl/10215810https://par.nsf.gov/servlets/purl/10215810
http://newandroidbook.com/Book/2-Excerpt-Data.pdfhttp://newandroidbook.com/Book/2-Excerpt-Data.pdf
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://www.jetir.org/papers/JETIR2408628.pdfhttps://www.jetir.org/papers/JETIR2408628.pdf
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://docplayer.net/90183420-Every-step-you-take-application-and-network-usage-in-android.htmlhttps://docplayer.net/90183420-Every-step-you-take-application-and-network-usage-in-android.html
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.htmlhttps://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.html
https://belkasoft.com/android-system-artifacts-devicehttps://belkasoft.com/android-system-artifacts-device
https://medium.com/@SIGMA_001/new-year-challenge-cybertalents-ctf-2025-forensics-writeup-dd5c46e126c4https://medium.com/@SIGMA_001/new-year-challenge-cybertalents-ctf-2025-forensics-writeup-dd5c46e126c4
https://www.stark4n6.com/2021/10/cellebrite-ctf-2021-heisenbergs-android.htmlhttps://www.stark4n6.com/2021/10/cellebrite-ctf-2021-heisenbergs-android.html
https://cellebrite.com/en/part-1-walk-through-of-answers-to-the-2021-ctf-investigating-heisenbergs-android-device/https://cellebrite.com/en/part-1-walk-through-of-answers-to-the-2021-ctf-investigating-heisenbergs-android-device/
https://medium.com/@williamskosasi/cellebrite-ctf-2021-writeup-b73d821a708https://medium.com/@williamskosasi/cellebrite-ctf-2021-writeup-b73d821a708
http://newandroidbook.com/Book/2-Excerpt-Data.pdfhttp://newandroidbook.com/Book/2-Excerpt-Data.pdf
https://cts-forensics.com/reports/22-5550_Web.pdfhttps://cts-forensics.com/reports/22-5550_Web.pdf
https://cellebrite.com/en/part-1-walk-through-of-answers-to-the-2021-ctf-investigating-heisenbergs-android-device/https://cellebrite.com/en/part-1-walk-through-of-answers-to-the-2021-ctf-investigating-heisenbergs-android-device/
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://ieeexplore.ieee.org/document/10679344https://ieeexplore.ieee.org/document/10679344
https://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/notificationHistory.pyhttps://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/notificationHistory.py
https://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.htmlhttps://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.html
https://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/pkgPredictions.pyhttps://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/pkgPredictions.py
https://cellebrite.com/en/part-2-ctf-2022-write-up-heisenbergs-android/https://cellebrite.com/en/part-2-ctf-2022-write-up-heisenbergs-android/
https://cts-forensics.com/reports/38550_Web.pdfhttps://cts-forensics.com/reports/38550_Web.pdf
https://cts-forensics.com/reports/19-5550_Web.pdfhttps://cts-forensics.com/reports/19-5550_Web.pdf
https://cts-forensics.com/reports/20-5550_Web.pdfhttps://cts-forensics.com/reports/20-5550_Web.pdf
https://cts-forensics.com/reports/21-5550_Web.pdfhttps://cts-forensics.com/reports/21-5550_Web.pdf
https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
https://cts-forensics.com/reports/20-5550_Web.pdfhttps://cts-forensics.com/reports/20-5550_Web.pdf
https://blog.d204n6.com/2021/01/android-roles-and-permissions-android.htmlhttps://blog.d204n6.com/2021/01/android-roles-and-permissions-android.html
https://belkasoft.com/android-system-artifacts-forensic-analysis-of-application-usagehttps://belkasoft.com/android-system-artifacts-forensic-analysis-of-application-usage
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.htmlhttps://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.html
https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/
https://www.magnetforensics.com/blog/mobile-forensics-discovering-the-undiscovered/https://www.magnetforensics.com/blog/mobile-forensics-discovering-the-undiscovered/
http://freeandroidforensics.blogspot.com/2014/11/some-artifacts-in-datasystem-directory.htmlhttp://freeandroidforensics.blogspot.com/2014/11/some-artifacts-in-datasystem-directory.html
http://newandroidbook.com/Book/2-Excerpt-Data.pdfhttp://newandroidbook.com/Book/2-Excerpt-Data.pdf
https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/packageInfo.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/packageInfo.py
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/permissions.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/permissions.py
https://blog.d204n6.com/2021/01/android-roles-and-permissions-android.htmlhttps://blog.d204n6.com/2021/01/android-roles-and-permissions-android.html
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.htmlhttps://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.html
https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/
http://newandroidbook.com/Book/2-Excerpt-Data.pdfhttp://newandroidbook.com/Book/2-Excerpt-Data.pdf
https://www.packtpub.com/product/learning-android-forensics-second-edition/9781789131017https://www.packtpub.com/product/learning-android-forensics-second-edition/9781789131017
https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
https://www.packtpub.com/product/learning-android-forensics-second-edition/9781789131017https://www.packtpub.com/product/learning-android-forensics-second-edition/9781789131017
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/packageGplinks.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/packageGplinks.py
https://cts-forensics.com/reports/20-5550_Web.pdfhttps://cts-forensics.com/reports/20-5550_Web.pdf
https://cts-forensics.com/reports/23-5550_Web.pdfhttps://cts-forensics.com/reports/23-5550_Web.pdf
https://cts-forensics.com/reports/24-5550_Web.pdfhttps://cts-forensics.com/reports/24-5550_Web.pdf
https://cellebrite.com/en/part-1-walk-through-of-answers-to-the-2021-ctf-investigating-heisenbergs-android-device/https://cellebrite.com/en/part-1-walk-through-of-answers-to-the-2021-ctf-investigating-heisenbergs-android-device/
https://blog.d204n6.com/2021/06/android-tracking-device-migration.htmlhttps://blog.d204n6.com/2021/06/android-tracking-device-migration.html
https://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android.htmlhttps://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android.html
https://www.stark4n6.com/2024/03/magnet-virtual-summit-2024-ctf-android.htmlhttps://www.stark4n6.com/2024/03/magnet-virtual-summit-2024-ctf-android.html
https://belkasoft.com/android-system-artifacts-forensic-analysis-of-application-usagehttps://belkasoft.com/android-system-artifacts-forensic-analysis-of-application-usage
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://forensafe.com/blogs/Android_Accounts.htmlhttps://forensafe.com/blogs/Android_Accounts.html
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/accounts_ce.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/accounts_ce.py
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://ieeexplore.ieee.org/document/10679344https://ieeexplore.ieee.org/document/10679344
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/notificationHistory.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/notificationHistory.py
https://www.magnetforensics.com/blog/mobile-forensics-discovering-the-undiscovered/https://www.magnetforensics.com/blog/mobile-forensics-discovering-the-undiscovered/
https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://abrignoni.blogspot.com/2019/02/android-recent-tasks-xml-parser.htmlhttps://abrignoni.blogspot.com/2019/02/android-recent-tasks-xml-parser.html
https://docplayer.net/90183420-Every-step-you-take-application-and-network-usage-in-android.htmlhttps://docplayer.net/90183420-Every-step-you-take-application-and-network-usage-in-android.html
https://www.sciencedirect.com/science/article/pii/S1742287619301628https://www.sciencedirect.com/science/article/pii/S1742287619301628
https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/recentactivity.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/recentactivity.py
https://www.magnetforensics.com/blog/mobile-forensics-discovering-the-undiscovered/https://www.magnetforensics.com/blog/mobile-forensics-discovering-the-undiscovered/
https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/
https://abrignoni.blogspot.com/2019/02/android-recent-tasks-xml-parser.htmlhttps://abrignoni.blogspot.com/2019/02/android-recent-tasks-xml-parser.html
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://www.sciencedirect.com/science/article/pii/S1742287619301628https://www.sciencedirect.com/science/article/pii/S1742287619301628
https://thebinaryhick.blog/2021/06/17/corroboration-that-is-all/https://thebinaryhick.blog/2021/06/17/corroboration-that-is-all/
https://docplayer.net/90183420-Every-step-you-take-application-and-network-usage-in-android.htmlhttps://docplayer.net/90183420-Every-step-you-take-application-and-network-usage-in-android.html
https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
https://www.cloud-response.com/2020/10/write-up-magnet-weekly-ctf.htmlhttps://www.cloud-response.com/2020/10/write-up-magnet-weekly-ctf.html
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/recentactivity.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/recentactivity.py
https://thebinaryhick.blog/2021/06/17/corroboration-that-is-all/https://thebinaryhick.blog/2021/06/17/corroboration-that-is-all/
https://abrignoni.blogspot.com/2019/02/android-recent-tasks-xml-parser.htmlhttps://abrignoni.blogspot.com/2019/02/android-recent-tasks-xml-parser.html
https://www.magnetforensics.com/blog/mobile-forensics-discovering-the-undiscovered/https://www.magnetforensics.com/blog/mobile-forensics-discovering-the-undiscovered/
https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://www.stark4n6.com/2022/05/magnet-virtual-summit-2022-ctf-android.htmlhttps://www.stark4n6.com/2022/05/magnet-virtual-summit-2022-ctf-android.html
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/recentactivity.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/recentactivity.py
https://abrignoni.blogspot.com/2019/02/android-usagestats-xml-parser.htmlhttps://abrignoni.blogspot.com/2019/02/android-usagestats-xml-parser.html
https://www.sans.org/white-papers/40265/https://www.sans.org/white-papers/40265/
http://www.swiftforensics.com/2020/01/usagestats-on-android-10-q.htmlhttp://www.swiftforensics.com/2020/01/usagestats-on-android-10-q.html
https://www.magnetforensics.com/blog/mobile-forensics-discovering-the-undiscovered/https://www.magnetforensics.com/blog/mobile-forensics-discovering-the-undiscovered/
https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/
http://freeandroidforensics.blogspot.com/2014/11/some-artifacts-in-datasystem-directory.htmlhttp://freeandroidforensics.blogspot.com/2014/11/some-artifacts-in-datasystem-directory.html
https://ccdcoe.org/uploads/2021/03/Android-Dumpsys-Analysis-to-Indicate-Driver-Distraction.pdfhttps://ccdcoe.org/uploads/2021/03/Android-Dumpsys-Analysis-to-Indicate-Driver-Distraction.pdf
https://docplayer.net/90183420-Every-step-you-take-application-and-network-usage-in-android.htmlhttps://docplayer.net/90183420-Every-step-you-take-application-and-network-usage-in-android.html
https://www.youtube.com/watch?v=4LcQm4ErXpAhttps://www.youtube.com/watch?v=4LcQm4ErXpA
https://docplayer.net/148670626-Tracking-traces-of-deleted-applications-christopher-vance-alexis-brignoni.htmlhttps://docplayer.net/148670626-Tracking-traces-of-deleted-applications-christopher-vance-alexis-brignoni.html
https://abrignoni.blogspot.com/2021/04/android-version-without-buildprops-file.htmlhttps://abrignoni.blogspot.com/2021/04/android-version-without-buildprops-file.html
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://belkasoft.com/android-system-artifacts-forensic-analysis-of-application-usagehttps://belkasoft.com/android-system-artifacts-forensic-analysis-of-application-usage
https://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android.htmlhttps://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android.html
http://newandroidbook.com/Book/2-Excerpt-Data.pdfhttp://newandroidbook.com/Book/2-Excerpt-Data.pdf
https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/usagestats.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/usagestats.py
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/usagestatsVersion.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/usagestatsVersion.py
https://blog.d204n6.com/2021/06/android-tracking-device-migration.htmlhttps://blog.d204n6.com/2021/06/android-tracking-device-migration.html
https://thebinaryhick.blog/2021/01/13/clockin-in-with-googles-wear-os/https://thebinaryhick.blog/2021/01/13/clockin-in-with-googles-wear-os/
https://belkasoft.com/android-system-artifacts-forensic-analysis-of-application-usagehttps://belkasoft.com/android-system-artifacts-forensic-analysis-of-application-usage
https://forensafe.com/blogs/Android_Accounts.htmlhttps://forensafe.com/blogs/Android_Accounts.html
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android.htmlhttps://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android.html
https://www.stark4n6.com/2024/03/magnet-virtual-summit-2024-ctf-android.htmlhttps://www.stark4n6.com/2024/03/magnet-virtual-summit-2024-ctf-android.html
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/accounts_de.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/accounts_de.py
https://github.com/RealityNet/Android-Forensics-References#user_de-folder
https://thebinaryhick.blog/2024/04/16/road-trippin-exploring-bluetooth-call-routes-on-samsung-phones/https://thebinaryhick.blog/2024/04/16/road-trippin-exploring-bluetooth-call-routes-on-samsung-phones/
https://cts-forensics.com/reports/20-5550_Web.pdfhttps://cts-forensics.com/reports/20-5550_Web.pdf
https://cts-forensics.com/reports/21-5550_Web.pdfhttps://cts-forensics.com/reports/21-5550_Web.pdf
https://cts-forensics.com/reports/24-5550_Web.pdfhttps://cts-forensics.com/reports/24-5550_Web.pdf
https://www.stark4n6.com/2021/10/cellebrite-ctf-2021-heisenbergs-android.htmlhttps://www.stark4n6.com/2021/10/cellebrite-ctf-2021-heisenbergs-android.html
https://belkasoft.com/android-system-artifacts-devicehttps://belkasoft.com/android-system-artifacts-device
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://thebinaryhick.blog/2022/12/06/mo-sims-mo-problems-examining-phones-with-dual-sims/https://thebinaryhick.blog/2022/12/06/mo-sims-mo-problems-examining-phones-with-dual-sims/
https://cellebrite.com/en/part-1-walk-through-of-answers-to-the-2021-ctf-investigating-heisenbergs-android-device/https://cellebrite.com/en/part-1-walk-through-of-answers-to-the-2021-ctf-investigating-heisenbergs-android-device/
https://medium.com/@williamskosasi/cellebrite-ctf-2021-writeup-b73d821a708https://medium.com/@williamskosasi/cellebrite-ctf-2021-writeup-b73d821a708
https://cellebrite.com/en/cellebrites-ctf-2023-recap-answers-for-russells-android-device/https://cellebrite.com/en/cellebrites-ctf-2023-recap-answers-for-russells-android-device/
https://cellebrite.com/en/hex-diving-the-easy-way-to-uncover-hidden-forensic-artifacts/https://cellebrite.com/en/hex-diving-the-easy-way-to-uncover-hidden-forensic-artifacts/
https://www.irjet.net/archives/V8/i8/IRJET-V8I885.pdfhttps://www.irjet.net/archives/V8/i8/IRJET-V8I885.pdf
https://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android.htmlhttps://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android.html
https://www.stark4n6.com/2024/03/magnet-virtual-summit-2024-ctf-android.htmlhttps://www.stark4n6.com/2024/03/magnet-virtual-summit-2024-ctf-android.html
https://m-brumbelow.github.io/posts/MVS2024CTF/https://m-brumbelow.github.io/posts/MVS2024CTF/
https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
https://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/siminfo.pyhttps://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/siminfo.py
https://github.com/RealityNet/Android-Forensics-References#data-folder
https://github.com/RealityNet/Android-Forensics-References#google-digital-wellbeing-comgoogleandroidappswellbeing
https://thebinaryhick.blog/2020/02/22/walking-the-android-timeline-using-androids-digital-wellbeing-to-timeline-android-activity/https://thebinaryhick.blog/2020/02/22/walking-the-android-timeline-using-androids-digital-wellbeing-to-timeline-android-activity/
https://belkasoft.com/android-system-artifacts-forensic-analysis-of-application-usagehttps://belkasoft.com/android-system-artifacts-forensic-analysis-of-application-usage
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://cellebrite.com/en/cellebrites-ctf-2023-recap-answers-for-russells-android-device/https://cellebrite.com/en/cellebrites-ctf-2023-recap-answers-for-russells-android-device/
https://forensafe.com/blogs/androidDigitalWellbeing.htmlhttps://forensafe.com/blogs/androidDigitalWellbeing.html
https://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.htmlhttps://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.html
https://buntingdigitalforensics.us/insights/reconstructing-distraction/https://buntingdigitalforensics.us/insights/reconstructing-distraction/
https://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/wellbeing.pyhttps://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/wellbeing.py
https://github.com/RealityNet/Android-Forensics-References#samsung-digital-wellbeing-comsamsungforest
https://thebinaryhick.blog/2020/02/22/walking-the-android-timeline-using-androids-digital-wellbeing-to-timeline-android-activity/https://thebinaryhick.blog/2020/02/22/walking-the-android-timeline-using-androids-digital-wellbeing-to-timeline-android-activity/
https://thebinaryhick.blog/2025/08/06/not-strange-bedfellows-samsungs-rubin-digital-wellbeing/https://thebinaryhick.blog/2025/08/06/not-strange-bedfellows-samsungs-rubin-digital-wellbeing/
https://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.htmlhttps://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.html
https://belkasoft.com/android-system-artifacts-forensic-analysis-of-application-usagehttps://belkasoft.com/android-system-artifacts-forensic-analysis-of-application-usage
https://forensafe.com/blogs/androidDigitalWellbeing.htmlhttps://forensafe.com/blogs/androidDigitalWellbeing.html
https://cellebrite.com/en/cellebrite-ctf-2023-recap-sharons-android/https://cellebrite.com/en/cellebrite-ctf-2023-recap-sharons-android/
https://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/swellbeing.pyhttps://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/swellbeing.py
https://github.com/RealityNet/Android-Forensics-References#google-docs-comgoogleandroidappsdocs
https://www.stark4n6.com/2020/12/google-docs-cello-doclist-dbs.htmlhttps://www.stark4n6.com/2020/12/google-docs-cello-doclist-dbs.html
https://forensafe.com/blogs/AndroidGoogleDrive.htmlhttps://forensafe.com/blogs/AndroidGoogleDrive.html
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/Cello.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/Cello.py
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/DocList.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/DocList.py
https://www.stark4n6.com/2020/12/google-docs-cello-doclist-dbs.htmlhttps://www.stark4n6.com/2020/12/google-docs-cello-doclist-dbs.html
https://forensafe.com/blogs/AndroidGoogleDrive.htmlhttps://forensafe.com/blogs/AndroidGoogleDrive.html
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://arxiv.org/ftp/arxiv/papers/1709/1709.10395.pdfhttps://arxiv.org/ftp/arxiv/papers/1709/1709.10395.pdf
http://obrienforensics.blogspot.com/2014/04/final-findings.htmlhttp://obrienforensics.blogspot.com/2014/04/final-findings.html
https://pdfs.semanticscholar.org/b699/e47687819041e2cbf69fa6d6afbd0c6a3fc2.pdfhttps://pdfs.semanticscholar.org/b699/e47687819041e2cbf69fa6d6afbd0c6a3fc2.pdf
https://cts-forensics.com/reports/37550_Web.pdfhttps://cts-forensics.com/reports/37550_Web.pdf
https://jit.ndhu.edu.tw/article/download/1795/1801https://jit.ndhu.edu.tw/article/download/1795/1801
https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/DocList.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/DocList.py
https://github.com/RealityNet/Android-Forensics-References#files-by-google-comgoogleandroidappsnbufiles
https://www.stark4n6.com/2021/01/files-by-google-more-mobile-explorer.htmlhttps://www.stark4n6.com/2021/01/files-by-google-more-mobile-explorer.html
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/FilesByGoogle_FilesMaster.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/FilesByGoogle.py
https://www.stark4n6.com/2021/01/files-by-google-more-mobile-explorer.htmlhttps://www.stark4n6.com/2021/01/files-by-google-more-mobile-explorer.html
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/FilesByGoogle_SearchHistory.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/FilesByGoogle.py
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/FilesByGoogle.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/FilesByGoogle.py
https://www.stark4n6.com/2021/01/files-by-google-more-mobile-explorer.htmlhttps://www.stark4n6.com/2021/01/files-by-google-more-mobile-explorer.html
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/FilesByGoogle_FilesMaster.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/FilesByGoogle.py
https://www.stark4n6.com/2021/01/files-by-google-more-mobile-explorer.htmlhttps://www.stark4n6.com/2021/01/files-by-google-more-mobile-explorer.html
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/FilesByGoogle_SearchHistory.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/FilesByGoogle.py
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/FilesByGoogle.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/FilesByGoogle.py
https://github.com/RealityNet/Android-Forensics-References#device-health-services-comgoogleandroidappsturbo
https://www.stark4n6.com/2020/12/charging-battery-with-turbo-db.htmlhttps://www.stark4n6.com/2020/12/charging-battery-with-turbo-db.html
https://cellebrite.com/en/part-2-ctf-2022-write-up-heisenbergs-android/https://cellebrite.com/en/part-2-ctf-2022-write-up-heisenbergs-android/
https://belkasoft.com/android-system-artifacts-devicehttps://belkasoft.com/android-system-artifacts-device
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android_5.htmlhttps://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android_5.html
https://www.forensafe.com/blogs/AndroidDeviceHealthServices.htmlhttps://www.forensafe.com/blogs/AndroidDeviceHealthServices.html
https://dfir.pubpub.org/pub/4can3p40/release/1https://dfir.pubpub.org/pub/4can3p40/release/1
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/Turbo_Battery.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/Turbo_Battery.py
https://www.stark4n6.com/2021/06/turbo-strikes-again-tracking-bluetooth.htmlhttps://www.stark4n6.com/2021/06/turbo-strikes-again-tracking-bluetooth.html
https://belkasoft.com/android-system-artifacts-devicehttps://belkasoft.com/android-system-artifacts-device
https://www.forensafe.com/blogs/AndroidDeviceHealthServices.htmlhttps://www.forensafe.com/blogs/AndroidDeviceHealthServices.html
https://dfir.pubpub.org/pub/4can3p40/release/1https://dfir.pubpub.org/pub/4can3p40/release/1
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/Turbo_Battery.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/Turbo_Battery.py
https://www.stark4n6.com/2021/06/turbo-application-usage.htmlhttps://www.stark4n6.com/2021/06/turbo-application-usage.html
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://belkasoft.com/android-system-artifacts-devicehttps://belkasoft.com/android-system-artifacts-device
https://dfir.pubpub.org/pub/4can3p40/release/1https://dfir.pubpub.org/pub/4can3p40/release/1
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/Turbo_AppUsage.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/Turbo_AppUsage.py
https://github.com/RealityNet/Android-Forensics-References#device-personalization-services-dps-comgoogleandroidas
https://belkasoft.com/android-system-artifacts-forensic-analysis-of-application-usagehttps://belkasoft.com/android-system-artifacts-forensic-analysis-of-application-usage
https://thebinaryhick.blog/2020/05/16/walking-the-android-timeline-part-2-using-androids-device-personalization-services-to-timeline-user-activity/https://thebinaryhick.blog/2020/05/16/walking-the-android-timeline-part-2-using-androids-device-personalization-services-to-timeline-user-activity/
https://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/usageapps.pyhttps://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/usageapps.py
https://cellebrite.com/en/cellebrites-ctf-2023-recap-answers-for-russells-android-device/https://cellebrite.com/en/cellebrites-ctf-2023-recap-answers-for-russells-android-device/
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/SimpleStorage_applaunch.pyhttps://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/SimpleStorage_applaunch.py
https://github.com/RealityNet/Android-Forensics-References#settings-services-comgoogleandroidsettingsintelligence
https://www.stark4n6.com/2021/12/application-battery-usage-via-settings.htmlhttps://www.stark4n6.com/2021/12/application-battery-usage-via-settings.html
https://thebinaryhick.blog/2022/04/09/examining-a-malware-infected-android-phone-this-android-is-not-alright/https://thebinaryhick.blog/2022/04/09/examining-a-malware-infected-android-phone-this-android-is-not-alright/
https://belkasoft.com/android-system-artifacts-devicehttps://belkasoft.com/android-system-artifacts-device
https://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android.htmlhttps://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android.html
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/battery_usage_v4.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/battery_usage_v4.py
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/battery_usage_v9.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/battery_usage_v9.py
https://thebinaryhick.blog/2021/08/19/wipeout-detecting-android-factory-resets/https://thebinaryhick.blog/2021/08/19/wipeout-detecting-android-factory-resets/
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/setupWizardinfo.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/setupWizardinfo.py
https://thebinaryhick.blog/2021/08/19/wipeout-detecting-android-factory-resets/https://thebinaryhick.blog/2021/08/19/wipeout-detecting-android-factory-resets/
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/suggestions.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/suggestions.py
https://github.com/RealityNet/Android-Forensics-References#google-play-service-comgoogleandroidgms
https://thebinaryhick.blog/2024/06/28/the-green-look-back-androids-on-device-location-history/https://thebinaryhick.blog/2024/06/28/the-green-look-back-androids-on-device-location-history/
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/appSemloc.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/appSemloc.py
https://thebinaryhick.blog/2024/06/28/the-green-look-back-androids-on-device-location-history/https://thebinaryhick.blog/2024/06/28/the-green-look-back-androids-on-device-location-history/
https://thebinaryhick.blog/2024/06/28/the-green-look-back-androids-on-device-location-history/https://thebinaryhick.blog/2024/06/28/the-green-look-back-androids-on-device-location-history/
https://deagler4n6blog.blogspot.com/2021/01/a-casting-story-castdb.htmlhttps://deagler4n6blog.blogspot.com/2021/01/a-casting-story-castdb.html
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/googleCast.pyhttps://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/googleCast.py
https://cellebrite.com/en/hex-diving-the-easy-way-to-uncover-hidden-forensic-artifacts/https://cellebrite.com/en/hex-diving-the-easy-way-to-uncover-hidden-forensic-artifacts/
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.htmlhttps://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.html
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://cts-forensics.com/reports/21-5550_Web.pdfhttps://cts-forensics.com/reports/21-5550_Web.pdf
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/installedappsGass.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/installedappsGass.py
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://dione.lib.unipi.gr/xmlui/bitstream/handle/unipi/11306/Kitsaki_mte1618.pdf?isAllowed=y&sequence=1https://dione.lib.unipi.gr/xmlui/bitstream/handle/unipi/11306/Kitsaki_mte1618.pdf?isAllowed=y&sequence=1
https://www.mdpi.com/2673-6756/2/1/16/htmhttps://www.mdpi.com/2673-6756/2/1/16/htm
http://trewmte.blogspot.com/2017/02/herrevad-databases-geo-location.htmlhttp://trewmte.blogspot.com/2017/02/herrevad-databases-geo-location.html
http://trewmte.blogspot.com/2018/07/update-herrevad-databases-geo-location.htmlhttp://trewmte.blogspot.com/2018/07/update-herrevad-databases-geo-location.html
http://trewmte.blogspot.com/2019/05/update2-herrevad-databases-geo-location.htmlhttp://trewmte.blogspot.com/2019/05/update2-herrevad-databases-geo-location.html
http://trewmte.blogspot.com/2019/12/update3-herrevad-databases-geo-location.htmlhttp://trewmte.blogspot.com/2019/12/update3-herrevad-databases-geo-location.html
https://cts-forensics.com/reports/19-5550_Web.pdfhttps://cts-forensics.com/reports/19-5550_Web.pdf
https://hackcorrelation.blogspot.com/2016/10/recovering-data-from-broken-screen.htmlhttps://hackcorrelation.blogspot.com/2016/10/recovering-data-from-broken-screen.html
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://github.com/python-for-mobile-forensics/Cellebrite-icing_mmssms.db-Parser/blob/master/README.mdhttps://github.com/python-for-mobile-forensics/Cellebrite-icing_mmssms.db-Parser/blob/master/README.md
https://www.magnetforensics.com/blog/android-messaging-forensics-sms-mms-and-beyond/https://www.magnetforensics.com/blog/android-messaging-forensics-sms-mms-and-beyond/
https://cellebrite.com/en/hex-diving-the-easy-way-to-uncover-hidden-forensic-artifacts/https://cellebrite.com/en/hex-diving-the-easy-way-to-uncover-hidden-forensic-artifacts/
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://stars.library.ucf.edu/cgi/viewcontent.cgi?referer=&httpsredir=1&article=2353&context=etdhttps://stars.library.ucf.edu/cgi/viewcontent.cgi?referer=&httpsredir=1&article=2353&context=etd
https://core.ac.uk/download/pdf/230544843.pdfhttps://core.ac.uk/download/pdf/230544843.pdf
https://www.cclsolutionsgroup.com/post/fcm-queued-messages-on-androidhttps://www.cclsolutionsgroup.com/post/fcm-queued-messages-on-android
https://forensafe.com/blogs/AndroidFCM.htmlhttps://forensafe.com/blogs/AndroidFCM.html
https://thebinaryhick.blog/2024/08/23/not-all-androids-who-wonder-are-lost-a-look-at-androids-find-my-device-network/https://thebinaryhick.blog/2024/08/23/not-all-androids-who-wonder-are-lost-a-look-at-androids-find-my-device-network/
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/FCMQueuedMessagesDump.pyhttps://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/FCMQueuedMessagesDump.py
https://docplayer.net/90183420-Every-step-you-take-application-and-network-usage-in-android.htmlhttps://docplayer.net/90183420-Every-step-you-take-application-and-network-usage-in-android.html
https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/
https://forensafe.com/blogs/Android_Accounts.htmlhttps://forensafe.com/blogs/Android_Accounts.html
https://cts-forensics.com/reports/21-5550_Web.pdfhttps://cts-forensics.com/reports/21-5550_Web.pdf
https://cts-forensics.com/reports/22-5550_Web.pdfhttps://cts-forensics.com/reports/22-5550_Web.pdf
https://cts-forensics.com/reports/38550_Web.pdfhttps://cts-forensics.com/reports/38550_Web.pdf
https://cts-forensics.com/reports/19-5550_Web.pdfhttps://cts-forensics.com/reports/19-5550_Web.pdf
https://cts-forensics.com/reports/20-5550_Web.pdfhttps://cts-forensics.com/reports/20-5550_Web.pdf
https://cts-forensics.com/reports/21-5550_Web.pdfhttps://cts-forensics.com/reports/21-5550_Web.pdf
https://cellebrite.com/en/hex-diving-the-easy-way-to-uncover-hidden-forensic-artifacts/https://cellebrite.com/en/hex-diving-the-easy-way-to-uncover-hidden-forensic-artifacts/
https://medium.com/@williamskosasi/cellebrite-ctf-2021-writeup-b73d821a708https://medium.com/@williamskosasi/cellebrite-ctf-2021-writeup-b73d821a708
https://www.stark4n6.com/2022/06/cellebrite-ctf-2022-heisenbergs-android.htmlhttps://www.stark4n6.com/2022/06/cellebrite-ctf-2022-heisenbergs-android.html
https://forensafe.com/blogs/Android_Last_SIM.htmlhttps://forensafe.com/blogs/Android_Last_SIM.html
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://thebinaryhick.blog/2020/08/22/nearby-share-airdrop-for-android-return-of-the-unsolicited-richard-photograph/https://thebinaryhick.blog/2020/08/22/nearby-share-airdrop-for-android-return-of-the-unsolicited-richard-photograph/
https://thebinaryhick.blog/2024/06/28/the-green-look-back-androids-on-device-location-history/https://thebinaryhick.blog/2024/06/28/the-green-look-back-androids-on-device-location-history/
https://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/ulrUserprefs.pyhttps://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/ulrUserprefs.py
https://github.com/RealityNet/Android-Forensics-References#google-play-store-comandroidvending
https://link.springer.com/article/10.1007/s12243-022-00919-6https://link.springer.com/article/10.1007/s12243-022-00919-6
https://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.htmlhttps://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.html
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://dl.acm.org/doi/10.1145/3297280.3297489https://dl.acm.org/doi/10.1145/3297280.3297489
https://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.htmlhttps://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.html
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://belkasoft.com/android-system-artifacts-forensic-analysis-of-application-usagehttps://belkasoft.com/android-system-artifacts-forensic-analysis-of-application-usage
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/frosting.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/frosting.py
https://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.htmlhttps://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.html
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://www.cclsolutionsgroup.com/post/when-is-an-app-not-an-app-investigating-webapks-on-androidhttps://www.cclsolutionsgroup.com/post/when-is-an-app-not-an-app-investigating-webapks-on-android
https://link.springer.com/article/10.1007/s12243-022-00919-6https://link.springer.com/article/10.1007/s12243-022-00919-6
https://www.magnetforensics.com/blog/mobile-forensics-discovering-the-undiscovered/https://www.magnetforensics.com/blog/mobile-forensics-discovering-the-undiscovered/
https://dl.acm.org/doi/10.1145/3297280.3297489https://dl.acm.org/doi/10.1145/3297280.3297489
https://ciofecaforensics.com/2020/10/31/cellebrite-ctf-rene/https://ciofecaforensics.com/2020/10/31/cellebrite-ctf-rene/
https://www.youtube.com/watch?v=4LcQm4ErXpAhttps://www.youtube.com/watch?v=4LcQm4ErXpA
https://docplayer.net/148670626-Tracking-traces-of-deleted-applications-christopher-vance-alexis-brignoni.htmlhttps://docplayer.net/148670626-Tracking-traces-of-deleted-applications-christopher-vance-alexis-brignoni.html
https://docplayer.net/90183420-Every-step-you-take-application-and-network-usage-in-android.htmlhttps://docplayer.net/90183420-Every-step-you-take-application-and-network-usage-in-android.html
https://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.htmlhttps://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.html
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/installedappsLibrary.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/installedappsLibrary.py
https://dl.acm.org/doi/10.1145/3297280.3297489https://dl.acm.org/doi/10.1145/3297280.3297489
https://www.youtube.com/watch?v=4LcQm4ErXpAhttps://www.youtube.com/watch?v=4LcQm4ErXpA
https://docplayer.net/148670626-Tracking-traces-of-deleted-applications-christopher-vance-alexis-brignoni.htmlhttps://docplayer.net/148670626-Tracking-traces-of-deleted-applications-christopher-vance-alexis-brignoni.html
https://cellebrite.com/en/part-2-ctf-2022-write-up-heisenbergs-android/https://cellebrite.com/en/part-2-ctf-2022-write-up-heisenbergs-android/
https://cts-forensics.com/reports/35550_Web.pdfhttps://cts-forensics.com/reports/35550_Web.pdf
https://cts-forensics.com/reports/36550_Web.pdfhttps://cts-forensics.com/reports/36550_Web.pdf
https://cts-forensics.com/reports/37550_Web.pdfhttps://cts-forensics.com/reports/37550_Web.pdf
https://cts-forensics.com/reports/38550_Web.pdfhttps://cts-forensics.com/reports/38550_Web.pdf
https://cts-forensics.com/reports/19-5550_Web.pdfhttps://cts-forensics.com/reports/19-5550_Web.pdf
https://cts-forensics.com/reports/20-5550_Web.pdfhttps://cts-forensics.com/reports/20-5550_Web.pdf
https://cts-forensics.com/reports/21-5550_Web.pdfhttps://cts-forensics.com/reports/21-5550_Web.pdf
https://cts-forensics.com/reports/22-5550_Web.pdfhttps://cts-forensics.com/reports/22-5550_Web.pdf
https://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.htmlhttps://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.html
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://forensafe.com/blogs/Android_InstalledApps.htmlhttps://forensafe.com/blogs/Android_InstalledApps.html
https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/installedappsVending.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/installedappsVending.py
https://www.youtube.com/watch?v=4LcQm4ErXpAhttps://www.youtube.com/watch?v=4LcQm4ErXpA
https://docplayer.net/148670626-Tracking-traces-of-deleted-applications-christopher-vance-alexis-brignoni.htmlhttps://docplayer.net/148670626-Tracking-traces-of-deleted-applications-christopher-vance-alexis-brignoni.html
https://cts-forensics.com/reports/35550_Web.pdfhttps://cts-forensics.com/reports/35550_Web.pdf
https://cts-forensics.com/reports/36550_Web.pdfhttps://cts-forensics.com/reports/36550_Web.pdf
https://cts-forensics.com/reports/37550_Web.pdfhttps://cts-forensics.com/reports/37550_Web.pdf
https://cts-forensics.com/reports/38550_Web.pdfhttps://cts-forensics.com/reports/38550_Web.pdf
https://cts-forensics.com/reports/19-5550_Web.pdfhttps://cts-forensics.com/reports/19-5550_Web.pdf
https://cts-forensics.com/reports/20-5550_Web.pdfhttps://cts-forensics.com/reports/20-5550_Web.pdf
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://belkasoft.com/android-system-artifacts-forensic-analysis-of-application-usagehttps://belkasoft.com/android-system-artifacts-forensic-analysis-of-application-usage
https://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android_5.htmlhttps://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android_5.html
https://www.stark4n6.com/2024/03/magnet-virtual-summit-2024-ctf-android.htmlhttps://www.stark4n6.com/2024/03/magnet-virtual-summit-2024-ctf-android.html
https://forensafe.com/blogs/Android_PlayStoreSearch.htmlhttps://forensafe.com/blogs/Android_PlayStoreSearch.html
https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
https://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/googlePlaySearches.pyhttps://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/googlePlaySearches.py
https://link.springer.com/article/10.1007/s12243-022-00919-6https://link.springer.com/article/10.1007/s12243-022-00919-6
https://github.com/RealityNet/Android-Forensics-References#google-quick-search-comgoogleandroidgooglequicksearchbox
http://www.swiftforensics.com/2020/03/google-search-personal-assistant-data.htmlhttp://www.swiftforensics.com/2020/03/google-search-personal-assistant-data.html
https://thebinaryhick.blog/2019/03/20/google-search-bar-search-term-history-are-you-finding-everything/https://thebinaryhick.blog/2019/03/20/google-search-bar-search-term-history-are-you-finding-everything/
https://link.springer.com/article/10.1007/s42979-020-00285-xhttps://link.springer.com/article/10.1007/s42979-020-00285-x
https://dfir.pubpub.org/pub/6ysxvhvc/release/1https://dfir.pubpub.org/pub/6ysxvhvc/release/1
https://cts-forensics.com/reports/36550_Web.pdfhttps://cts-forensics.com/reports/36550_Web.pdf
https://kyuhlee.github.io/publications/asiaccs17.pdfhttps://kyuhlee.github.io/publications/asiaccs17.pdf
https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
https://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.htmlhttps://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.html
https://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android_5.htmlhttps://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android_5.html
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googleQuickSearchbox.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googleQuickSearchbox.py
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googleQuickSearchboxRecent.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googleQuickSearchboxRecent.py
https://github.com/RealityNet/Android-Forensics-References#google-services-framework-comgoogleandroidgsf
https://cts-forensics.com/reports/22-5550_Web.pdfhttps://cts-forensics.com/reports/22-5550_Web.pdf
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://www.fortoo.eu/m/page-media/4/Andriotis-2012-1-wifs.pdfhttps://www.fortoo.eu/m/page-media/4/Andriotis-2012-1-wifs.pdf
https://cts-forensics.com/reports/38550_Web.pdfhttps://cts-forensics.com/reports/38550_Web.pdf
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/pSettings.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/pSettings.py
https://github.com/RealityNet/Android-Forensics-References#messages-comgoogleandroidappsmessaging
https://cellebrite.com/en/hex-diving-the-easy-way-to-uncover-hidden-forensic-artifacts/https://cellebrite.com/en/hex-diving-the-easy-way-to-uncover-hidden-forensic-artifacts/
https://www.magnetforensics.com/blog/android-messaging-forensics-sms-mms-and-beyond/https://www.magnetforensics.com/blog/android-messaging-forensics-sms-mms-and-beyond/
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android.htmlhttps://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android.html
https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googleMessages.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googleMessages.py
https://www.stark4n6.com/2025/03/magnet-virtual-summit-2025-ctf-android.htmlhttps://www.stark4n6.com/2025/03/magnet-virtual-summit-2025-ctf-android.html
https://github.com/RealityNet/Android-Forensics-References#samsung-one-ui-home-comsecandroidapplauncher
https://abrignoni.blogspot.com/2019/10/recreate-android-apps-folders-and.htmlhttps://abrignoni.blogspot.com/2019/10/recreate-android-apps-folders-and.html
https://github.com/RealityNet/Android-Forensics-References#android-contacts-storage-comandroidproviderscontacts
https://cts-forensics.com/reports/20-5550_Web.pdfhttps://cts-forensics.com/reports/20-5550_Web.pdf
https://cts-forensics.com/reports/21-5550_Web.pdfhttps://cts-forensics.com/reports/21-5550_Web.pdf
https://cts-forensics.com/reports/22-5550_Web.pdfhttps://cts-forensics.com/reports/22-5550_Web.pdf
https://cellebrite.com/en/hex-diving-the-easy-way-to-uncover-hidden-forensic-artifacts/https://cellebrite.com/en/hex-diving-the-easy-way-to-uncover-hidden-forensic-artifacts/
https://forensenellanebbia.blogspot.com/2018/10/calllogdb-and-sms-data-on-android-70.htmlhttps://forensenellanebbia.blogspot.com/2018/10/calllogdb-and-sms-data-on-android-70.html
https://www.irjet.net/archives/V8/i8/IRJET-V8I885.pdfhttps://www.irjet.net/archives/V8/i8/IRJET-V8I885.pdf
https://github.com/kacos2000/Queries/blob/master/calllog_db.sqlhttps://github.com/kacos2000/Queries/blob/master/calllog_db.sql
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://forensafe.com/blogs/Android_Call_logs.htmlhttps://forensafe.com/blogs/Android_Call_logs.html
https://forensafe.com/blogs/AndroidSMS.htmlhttps://forensafe.com/blogs/AndroidSMS.html
https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/
https://thebinaryhick.blog/2024/04/16/road-trippin-exploring-bluetooth-call-routes-on-samsung-phones/https://thebinaryhick.blog/2024/04/16/road-trippin-exploring-bluetooth-call-routes-on-samsung-phones/
https://www.packtpub.com/product/learning-android-forensics-second-edition/9781789131017https://www.packtpub.com/product/learning-android-forensics-second-edition/9781789131017
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/calllog.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/calllog.py
https://smarterforensics.com/wp-content/uploads/2014/06/OpenSourceMobileForensics.pdfhttps://smarterforensics.com/wp-content/uploads/2014/06/OpenSourceMobileForensics.pdf
https://cts-forensics.com/reports/36550_Web.pdfhttps://cts-forensics.com/reports/36550_Web.pdf
https://cts-forensics.com/reports/37550_Web.pdfhttps://cts-forensics.com/reports/37550_Web.pdf
https://cts-forensics.com/reports/38550_Web.pdfhttps://cts-forensics.com/reports/38550_Web.pdf
https://cts-forensics.com/reports/19-5550_Web.pdfhttps://cts-forensics.com/reports/19-5550_Web.pdf
https://cts-forensics.com/reports/20-5550_Web.pdfhttps://cts-forensics.com/reports/20-5550_Web.pdf
https://cts-forensics.com/reports/21-5550_Web.pdfhttps://cts-forensics.com/reports/21-5550_Web.pdf
https://cts-forensics.com/reports/22-5550_Web.pdfhttps://cts-forensics.com/reports/22-5550_Web.pdf
https://www.irjet.net/archives/V8/i8/IRJET-V8I885.pdfhttps://www.irjet.net/archives/V8/i8/IRJET-V8I885.pdf
https://github.com/kacos2000/Queries/blob/master/contacts2.sqlhttps://github.com/kacos2000/Queries/blob/master/contacts2.sql
https://github.com/kacos2000/Queries/blob/master/contacts2calls.sqlhttps://github.com/kacos2000/Queries/blob/master/contacts2calls.sql
https://www.packtpub.com/product/learning-android-forensics-second-edition/9781789131017https://www.packtpub.com/product/learning-android-forensics-second-edition/9781789131017
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://forensafe.com/blogs/Android_Contacts.htmlhttps://forensafe.com/blogs/Android_Contacts.html
https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/contacts.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/contacts.py
https://cts-forensics.com/reports/21-5550_Web.pdfhttps://cts-forensics.com/reports/21-5550_Web.pdf
https://github.com/RealityNet/Android-Forensics-References#android-messaging-storage-comandroidproviderstelephony
https://www.magnetforensics.com/blog/android-messaging-forensics-sms-mms-and-beyond/https://www.magnetforensics.com/blog/android-messaging-forensics-sms-mms-and-beyond/
https://blog.katastros.com/a?ID=00250-640c0b9b-4c94-4928-9250-7406735e59a2https://blog.katastros.com/a?ID=00250-640c0b9b-4c94-4928-9250-7406735e59a2
https://cellebrite.com/en/part-1-walk-through-of-answers-to-the-2021-ctf-investigating-heisenbergs-android-device/https://cellebrite.com/en/part-1-walk-through-of-answers-to-the-2021-ctf-investigating-heisenbergs-android-device/
https://www.stark4n6.com/2022/06/cellebrite-ctf-2022-heisenbergs-android.htmlhttps://www.stark4n6.com/2022/06/cellebrite-ctf-2022-heisenbergs-android.html
https://forensafe.com/blogs/AndroidSMS.htmlhttps://forensafe.com/blogs/AndroidSMS.html
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.htmlhttps://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.html
https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/
https://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android.htmlhttps://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android.html
https://www.packtpub.com/product/learning-android-forensics-second-edition/9781789131017https://www.packtpub.com/product/learning-android-forensics-second-edition/9781789131017
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/smsmms.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/smsmms.py
https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
https://github.com/RealityNet/Android-Forensics-References#android-calendar-storage-comandroidproviderscalendar
https://cts-forensics.com/reports/36550_Web.pdfhttps://cts-forensics.com/reports/36550_Web.pdf
https://cts-forensics.com/reports/37550_Web.pdfhttps://cts-forensics.com/reports/37550_Web.pdf
https://cts-forensics.com/reports/38550_Web.pdfhttps://cts-forensics.com/reports/38550_Web.pdf
https://cts-forensics.com/reports/19-5550_Web.pdfhttps://cts-forensics.com/reports/19-5550_Web.pdf
https://cts-forensics.com/reports/20-5550_Web.pdfhttps://cts-forensics.com/reports/20-5550_Web.pdf
https://cts-forensics.com/reports/21-5550_Web.pdfhttps://cts-forensics.com/reports/21-5550_Web.pdf
https://cts-forensics.com/reports/22-5550_Web.pdfhttps://cts-forensics.com/reports/22-5550_Web.pdf
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android.htmlhttps://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android.html
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googleCalendar.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googleCalendar.py
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://cts-forensics.com/reports/22-5550_Web.pdfhttps://cts-forensics.com/reports/22-5550_Web.pdf
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googleCalendar.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googleCalendar.py
https://github.com/RealityNet/Android-Forensics-References#android-download-provider-comandroidprovidersdownloads
https://forensafe.com/blogs/Android_Downloads.htmlhttps://forensafe.com/blogs/Android_Downloads.html
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://cts-forensics.com/reports/36550_Web.pdfhttps://cts-forensics.com/reports/36550_Web.pdf
https://cts-forensics.com/reports/38550_Web.pdfhttps://cts-forensics.com/reports/38550_Web.pdf
https://media.defcon.org/DEF%20CON%2020/DEF%20CON%2020%20presentations/DEF%20CON%2020%20-%20Robinson-Spy-vs-Spy.pdfhttps://media.defcon.org/DEF%20CON%2020/DEF%20CON%2020%20presentations/DEF%20CON%2020%20-%20Robinson-Spy-vs-Spy.pdf
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/downloads.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/downloads.py
https://github.com/RealityNet/Android-Forensics-References#android-media-storage
https://thebinaryhick.blog/2020/10/19/androids-external-db-everything-old-is-new-again/https://thebinaryhick.blog/2020/10/19/androids-external-db-everything-old-is-new-again/
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://forensafe.com/blogs/AndroidScopedStorage.htmlhttps://forensafe.com/blogs/AndroidScopedStorage.html
https://www.magnetforensics.com/blog/how-to-uncover-media-artifacts-for-mobile-device-investigations/https://www.magnetforensics.com/blog/how-to-uncover-media-artifacts-for-mobile-device-investigations/
https://findingtrouble.medium.com/the-role-of-external-db-in-android-forensics-53087f048864https://findingtrouble.medium.com/the-role-of-external-db-in-android-forensics-53087f048864
https://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android_5.htmlhttps://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android_5.html
https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/emulatedSmeta.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/emulatedSmeta.py
https://github.com/RealityNet/Android-Forensics-References#android-logs-provider-comsecandroidproviderlogsprovider
https://www.magnetforensics.com/blog/android-messaging-forensics-sms-mms-and-beyond/https://www.magnetforensics.com/blog/android-messaging-forensics-sms-mms-and-beyond/
https://github.com/kacos2000/Queries/blob/master/logs_db.sqlhttps://github.com/kacos2000/Queries/blob/master/logs_db.sql
https://cts-forensics.com/reports/35550_Web.pdfhttps://cts-forensics.com/reports/35550_Web.pdf
https://cts-forensics.com/reports/38550_Web.pdfhttps://cts-forensics.com/reports/38550_Web.pdf
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/calllogs.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/calllogs.py
https://github.com/RealityNet/Android-Forensics-References#android-location-comgoogleandroidlocation
https://forensics.spreitzenbarth.de/2011/10/28/decoding-cache-cell-and-cache-wifi-files/https://forensics.spreitzenbarth.de/2011/10/28/decoding-cache-cell-and-cache-wifi-files/
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/cachelocation.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/cachelocation.py
https://github.com/RealityNet/Android-Forensics-References#android-auto-comgoogleandroidprojectiongearhead
https://cellebrite.com/en/how-android-bluetooth-connections-can-determine-if-the-hands-of-a-driver-were-on-the-wheel-during-an-accident/https://cellebrite.com/en/how-android-bluetooth-connections-can-determine-if-the-hands-of-a-driver-were-on-the-wheel-during-an-accident/
https://dfir.pubpub.org/pub/6ysxvhvc/release/1https://dfir.pubpub.org/pub/6ysxvhvc/release/1
https://www.researchgate.net/publication/360577665_Auto-Parser_Android_Auto_and_Apple_CarPlay_Forensics_Auto-Parser_Android_Auto_and_Apple_CarPlay_Forensicshttps://www.researchgate.net/publication/360577665_Auto-Parser_Android_Auto_and_Apple_CarPlay_Forensics_Auto-Parser_Android_Auto_and_Apple_CarPlay_Forensics
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/androidauto.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/androidauto.py
https://github.com/RealityNet/Android-Forensics-References#gboard-google-keyboard-comgoogleandroidinputmethodlatin
https://www.swiftforensics.com/2021/01/gboard-has-some-interesting-data.htmlhttps://github.com/RealityNet/Android-Forensics-References/blob/main/
https://forensafe.com/blogs/AndroidGBoard.htmlhttps://forensafe.com/blogs/AndroidGBoard.html
https://kibaffo33.data.blog/2022/06/05/omgboard/https://kibaffo33.data.blog/2022/06/05/omgboard/
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/gboard.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/gboard.py
https://www.stark4n6.com/2023/05/gboard-and-clipboard-history.htmlhttps://github.com/RealityNet/Android-Forensics-References/blob/main/
https://forensafe.com/blogs/AndroidGBoard.htmlhttps://forensafe.com/blogs/AndroidGBoard.html
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/gboard.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/gboard.py
https://www.stark4n6.com/2023/05/gboard-and-clipboard-history.htmlhttps://github.com/RealityNet/Android-Forensics-References/blob/main/
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/gboard.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/gboard.py
https://github.com/RealityNet/Android-Forensics-References#google-meet-comgoogleandroidappstachyon
https://www.stark4n6.com/2021/08/google-duo-android-ios-forensic-analysis.htmlhttps://www.stark4n6.com/2021/08/google-duo-android-ios-forensic-analysis.html
https://www.forensafe.com/blogs/android-google-meet.htmlhttps://www.forensafe.com/blogs/android-google-meet.html
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googleDuo.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googleDuo.py
https://github.com/RealityNet/Android-Forensics-References#google-keep---notes-and-lists-comgoogleandroidappstachyon
https://www.stark4n6.com/2021/08/google-duo-android-ios-forensic-analysis.htmlhttps://www.stark4n6.com/2021/08/google-duo-android-ios-forensic-analysis.html
https://www.forensafe.com/blogs/AndroidGoogleKeep.htmlhttps://www.forensafe.com/blogs/AndroidGoogleKeep.html
https://blog.bi0s.in/2021/06/18/Forensics/Google-Keep-Notes-and-Lists-Mobile-Artifacts/https://blog.bi0s.in/2021/06/18/Forensics/Google-Keep-Notes-and-Lists-Mobile-Artifacts/
https://g4rud4.gitlab.io/2021/Google-Keep-Notes-and-Lists-Mobile-Artifacts/https://g4rud4.gitlab.io/2021/Google-Keep-Notes-and-Lists-Mobile-Artifacts/
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://cts-forensics.com/reports/21-5550_Web.pdfhttps://cts-forensics.com/reports/21-5550_Web.pdf
https://cts-forensics.com/reports/24-5550_Web.pdfhttps://cts-forensics.com/reports/24-5550_Web.pdf
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googleKeepNotes.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googleKeepNotes.py
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/keepNotes.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/keepNotes.py
https://github.com/RealityNet/Android-Forensics-References#google-tasks-comgoogleandroidappstasks
https://g4rud4.gitlab.io/2021/Google-Tasks-Android-Forensics-analysis/https://g4rud4.gitlab.io/2021/Google-Tasks-Android-Forensics-analysis/
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googleTasks.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googleTasks.py
https://github.com/RealityNet/Android-Forensics-References#google-maps-comgoogleandroidappsmaps
https://thebinaryhick.blog/2023/10/17/finding-phones-with-google-maps-part-1-android/https://thebinaryhick.blog/2023/10/17/finding-phones-with-google-maps-part-1-android/
https://kibaffo33.data.blog/2021/12/30/at-the-roundabout-take-the-second-exit/https://kibaffo33.data.blog/2021/12/30/at-the-roundabout-take-the-second-exit/
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googlemapaudio.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googlemapaudio.py
https://thebinaryhick.blog/2023/10/17/finding-phones-with-google-maps-part-1-android/https://thebinaryhick.blog/2023/10/17/finding-phones-with-google-maps-part-1-android/
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googlemapaudioTemp.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googlemapaudioTemp.py
https://thebinaryhick.blog/2023/10/17/finding-phones-with-google-maps-part-1-android/https://thebinaryhick.blog/2023/10/17/finding-phones-with-google-maps-part-1-android/
https://segumarc.com/2023/12/15/decoding-android-google-maps-gmm_myplaces-db/https://segumarc.com/2023/12/15/decoding-android-google-maps-gmm_myplaces-db/
https://cts-forensics.com/reports/23-5550_Web.pdfhttps://cts-forensics.com/reports/23-5550_Web.pdf
https://cts-forensics.com/reports/24-5550_Web.pdfhttps://cts-forensics.com/reports/24-5550_Web.pdf
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googleMapsGmm.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googleMapsGmm.py
https://thebinaryhick.blog/2023/10/17/finding-phones-with-google-maps-part-1-android/https://thebinaryhick.blog/2023/10/17/finding-phones-with-google-maps-part-1-android/
https://cts-forensics.com/reports/24-5550_Web.pdfhttps://cts-forensics.com/reports/24-5550_Web.pdf
https://www.stark4n6.com/2024/03/magnet-virtual-summit-2024-ctf-android.htmlhttps://www.stark4n6.com/2024/03/magnet-virtual-summit-2024-ctf-android.html
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googleMapsGmm.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googleMapsGmm.py
https://thebinaryhick.blog/2023/10/17/finding-phones-with-google-maps-part-1-android/https://thebinaryhick.blog/2023/10/17/finding-phones-with-google-maps-part-1-android/
https://forensafe.com/blogs/Android-GoogleMaps.htmlhttps://forensafe.com/blogs/Android-GoogleMaps.html
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googleMapsGmm.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googleMapsGmm.py
https://thebinaryhick.blog/2023/10/17/finding-phones-with-google-maps-part-1-android/https://thebinaryhick.blog/2023/10/17/finding-phones-with-google-maps-part-1-android/
https://cts-forensics.com/reports/24-5550_Web.pdfhttps://cts-forensics.com/reports/24-5550_Web.pdf
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googleMapsSearches.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googleMapsSearches.py
https://thebinaryhick.blog/2023/10/17/finding-phones-with-google-maps-part-1-android/https://thebinaryhick.blog/2023/10/17/finding-phones-with-google-maps-part-1-android/
https://cts-forensics.com/reports/21-5550_Web.pdfhttps://cts-forensics.com/reports/21-5550_Web.pdf
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googleLastTrip.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googleLastTrip.py
https://github.com/RealityNet/Android-Forensics-References#google-photos-comgoogleandroidappsphotos
https://forensafe.com/blogs/AndroidGooglePhotos.htmlhttps://forensafe.com/blogs/AndroidGooglePhotos.html
https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.htmlhttps://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googlePhotos.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googlePhotos.py
https://forensafe.com/blogs/AndroidGooglePhotos.htmlhttps://forensafe.com/blogs/AndroidGooglePhotos.html
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googlePhotos.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googlePhotos.py
https://deagler4n6blog.blogspot.com/2021/01/dumpster-diving-in-google-photos-android-app.htmlhttps://deagler4n6blog.blogspot.com/2021/01/dumpster-diving-in-google-photos-android-app.html
https://forensafe.com/blogs/AndroidGooglePhotos.htmlhttps://forensafe.com/blogs/AndroidGooglePhotos.html
https://github.com/RealityNet/Android-Forensics-References#samsung-my-files-comsecandroidappmyfiles
https://abrignoni.blogspot.com/2019/06/android-samsung-my-files-app.htmlhttps://abrignoni.blogspot.com/2019/06/android-samsung-my-files-app.html
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/smyFiles.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/smyFiles.py
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/smyfilesOpHistory.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/smyfilesOpHistory.py
https://abrignoni.blogspot.com/2019/06/android-samsung-my-files-app.htmlhttps://abrignoni.blogspot.com/2019/06/android-samsung-my-files-app.html
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/smyfilesOpHistory.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/smyfilesStored.py
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/smyfilescache.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/smyfilescache.py
https://github.com/RealityNet/Android-Forensics-References#samsung-gallery-comsecandroidgallery3d
http://cheeky4n6monkey.blogspot.com/2022/01/mike-monkey-dumpster-dive-into-samsung.htmlhttp://cheeky4n6monkey.blogspot.com/2022/01/mike-monkey-dumpster-dive-into-samsung.html
https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/galleryTrash.pyhttps://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/galleryTrash.py
Readme https://github.com/RealityNet/Android-Forensics-References#readme-ov-file
Please reload this pagehttps://github.com/RealityNet/Android-Forensics-References
Activityhttps://github.com/RealityNet/Android-Forensics-References/activity
Custom propertieshttps://github.com/RealityNet/Android-Forensics-References/custom-properties
39 forkshttps://github.com/RealityNet/Android-Forensics-References/forks
Report repository https://github.com/contact/report-content?content_url=https%3A%2F%2Fgithub.com%2FRealityNet%2FAndroid-Forensics-References&report=RealityNet+%28user%29
Releaseshttps://github.com/RealityNet/Android-Forensics-References/releases
Packages 0https://github.com/orgs/RealityNet/packages?repo_name=Android-Forensics-References
Please reload this pagehttps://github.com/RealityNet/Android-Forensics-References
Contributorshttps://github.com/RealityNet/Android-Forensics-References/graphs/contributors
Please reload this pagehttps://github.com/RealityNet/Android-Forensics-References
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.