Re: [sleuthkit-developers] Android forensics - Autopsy module

[Brian C. <ca...@sl...>]

Adding to Justin’s comment, you can start with the Python tutorial that I did last year, which focuses on a smart phone-like use case that looks for a SQLite database and parses the contents.

http://www.autopsy.com/python-autopsy-module-tutorial-2-the-data-source-ingest-module/


> On Jun 12, 2016, at 12:18 PM, Justin Grover <jus...@gm...> wrote:
> 
> Hi Roberto,
> 
> Good luck on your project! Assuming I'm understanding your task correctly, you are first going to need to target/look at a specific app or file of interest on Android that contains geodata. After you've figured out the specifics of where/how the data is stored, you will probably want to create a data source ingest module in Autopsy to extract/display your findings.
> 
> Justin
> 
> On Jun 11, 2016 2:18 PM, "Roberto Amelio" <g.r...@gm...> wrote:
> Hi,
> 
> My name is Roberto and I'm doing a MSc in Cyber Security. I would like to develop a module for Autopsy as my final project. It has to be focused on mobile (Android) forensics, I am reading the documentation online getting an idea about ingest modules and what the Android Analyser Module already does. 
> 
> My idea is to retrieve as much information on locations as possible to be able to track where the phone has been, providing an XML file (or something like that) to plot.
> 
> I would appreciate feedback about it and help to start. I hope my question is appropriate for this mailing list, I am not used to use it.
> 
> Regards,
> 
> Roberto
> 
> 
> ------------------------------------------------------------------------------
> What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
> patterns at an interface-level. Reveals which users, apps, and protocols are
> consuming the most bandwidth. Provides multi-vendor support for NetFlow,
> J-Flow, sFlow and other flows. Make informed decisions using capacity
> planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
> _______________________________________________
> sleuthkit-developers mailing list
> sle...@li...
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-developers
> 
> ------------------------------------------------------------------------------
> What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
> patterns at an interface-level. Reveals which users, apps, and protocols are 
> consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
> J-Flow, sFlow and other flows. Make informed decisions using capacity 
> planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e_______________________________________________
> sleuthkit-developers mailing list
> sle...@li...
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-developers