Re: [sleuthkit-developers] Android forensics - Autopsy module

[Justin G. <jus...@gm...>]

Yes, good plan. I imagine its full usefulness will dependent on your
findings, but at the very least it should serve as a good "example" for
others wanting to do something similar with other apps/geodata.

Justin
On Jun 12, 2016 2:31 PM, "Roberto Amelio" <g.r...@gm...> wrote:

> Thank you! my plan was like that, is it worthy? It is my first time I
> contribute on a open source platform and I would like to interact with the
> community and doing something useful.
>
> Roberto
>
> On Sun, 12 Jun 2016 at 17:18 Justin Grover <jus...@gm...>
> wrote:
>
>> Hi Roberto,
>>
>> Good luck on your project! Assuming I'm understanding your task
>> correctly, you are first going to need to target/look at a specific app or
>> file of interest on Android that contains geodata. After you've figured out
>> the specifics of where/how the data is stored, you will probably want to
>> create a data source ingest module in Autopsy to extract/display your
>> findings.
>>
>> Justin
>> On Jun 11, 2016 2:18 PM, "Roberto Amelio" <g.r...@gm...> wrote:
>>
>>> Hi,
>>>
>>> My name is Roberto and I'm doing a MSc in Cyber Security. I would like
>>> to develop a module for Autopsy as my final project. It has to be focused
>>> on mobile (Android) forensics, I am reading the documentation online
>>> getting an idea about ingest modules and what the Android Analyser Module
>>> already does.
>>>
>>> My idea is to retrieve as much information on locations as possible to
>>> be able to track where the phone has been, providing an XML file (or
>>> something like that) to plot.
>>>
>>> I would appreciate feedback about it and help to start. I hope my
>>> question is appropriate for this mailing list, I am not used to use it.
>>>
>>> Regards,
>>>
>>> Roberto
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> What NetFlow Analyzer can do for you? Monitors network bandwidth and
>>> traffic
>>> patterns at an interface-level. Reveals which users, apps, and protocols
>>> are
>>> consuming the most bandwidth. Provides multi-vendor support for NetFlow,
>>> J-Flow, sFlow and other flows. Make informed decisions using capacity
>>> planning reports.
>>> https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
>>> _______________________________________________
>>> sleuthkit-developers mailing list
>>> sle...@li...
>>> https://lists.sourceforge.net/lists/listinfo/sleuthkit-developers
>>>
>>>