Re: [sleuthkit-developers] Final year project

[Mari T. <mar...@gm...>]

For recovering deleted data, a good place to start might be sqlite
databases within the file system. Androids stores information such as SMS
and Email within these databases. You can recover deleted entries by
parsing the unallocated space within the sqlite database itself.

I've written a Python script that does this that you might be able to
incorporate or use the algorithms from.


On Mon, Dec 2, 2013 at 1:32 PM, Wiktor Sypniewski <
wik...@gm...> wrote:

> Hi Guys,
>
> My name is Victor and I'm final year student in Dublin Institute of
> Technology. I would like to develop module for Autopsy as my final year
> project.
>
> I'm interested in mobile forensics. I would like to develop a module that
> would be able to browse/recover data from a mobile device running on
> Android.
>
> I'm not sure what kind of data I should be interested in? I think that
> Autopsy 3 can scan mobile device as if it was just a disc but is there
> anything else I should be looking for?
>
> Any help in getting me started with this will be greatly appreciated!
>
> Kindest Regards
> Vic
>
>
>
>
> Wiktor Sypniewski
> +353862177331
>
> www.bluegreenblack.com
>
>
> ------------------------------------------------------------------------------
> Rapidly troubleshoot problems before they affect your business. Most IT
> organizations don't have a clear picture of how application performance
> affects their revenue. With AppDynamics, you get 100% visibility into your
> Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics
> Pro!
> http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk
> _______________________________________________
> sleuthkit-developers mailing list
> sle...@li...
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-developers
>
>