MOBILE FORENSICS

Forensic analysis of Android call logs

Call logs are among the most important communication records on an Android device. They record incoming, outgoing and missed calls and can provide valuable insights into communication patterns as part of an IT forensic investigation.

Incoming calls
Outgoing calls
Missed calls
Telephone numbers and contact details
Call duration
Timestamp
SQLite databases
Synchronisation information
App-specific VoIP call data (depending on the application)

TECHNICAL BACKGROUND

Technical Fundamentals

Android stores call information in system-level databases and other artefacts.

Information relevant to forensic investigations may include, amongst other things:

  • •Incoming calls
  • •Outgoing calls
  • •Missed calls
  • •Telephone numbers and contact details
  • •Call duration
  • •Timestamp
  • •SQLite databases
  • •Synchronisation information
  • •App-specific VoIP call data (depending on the application)

The type and scope of the available data vary depending on the Android version, the manufacturer and the telephone or VoIP application used.

OUR APPROACH

This is how your examination will be carried out

A transparent process – from the initial enquiry to the handover of the report.

1
Following a suitable forensic data backup, call logs, databases and other communication artefacts are analysed using recognised IT forensic tools as well as manual analysis. Timestamps are correlated with contacts, messaging data, system logs and other artefacts. All stages of the investigation are documented in a reproducible manner and assessed solely on the basis of objective technical findings.
2
LanCologne produces expert reports for private individuals, as well as for companies and solicitors. Our reports have already been used in court proceedings. In some cases, we have been directly commissioned to produce IT forensic reports. Upon request, we can provide anonymised or redacted sample reports or extracts.

TYPICAL QUESTIONS

When is this analysis required?

  • ✔What calls were made?
  • ✔When did the calls take place?
  • ✔How long did the discussions last?
  • ✔Which phone numbers or contacts are involved?
  • ✔Is it technically possible to recover deleted call logs?

LIMITATIONS & CONCLUSION

What you should know

Deleted call logs, synchronisation processes or device-specific differences may affect the scope of the available data. Individual entries are always assessed in the context of other technical artefacts.

Analysing Android call logs often provides important insights into communication patterns. Only by correlating this data with other evidence is it possible to carry out a robust IT forensic assessment.

CUSTOMER REVIEWS

What our customers say

4.8 out of 5 stars on Trustpilot · 54 reviews

★★★★★

“The highest standards of professionalism, prompt service and excellent communication. They made the seemingly impossible a reality. This is what genuine customer service is all about – unrivalled in Germany!”

idalein

Verified review on Trustpilot

★★★★★

“Very helpful advice, excellent responsiveness and communication. My problem was completely resolved and the lost data was recovered. I’m very satisfied and, of course, relieved!”

Layla Pankratz

Verified review on Trustpilot

★★★★★

“My problem was sorted out professionally and quickly; everyone I spoke to was always friendly, and I can still get in touch if I have any questions – I’m very grateful for that!”

a woman from Cologne

Verified review on Trustpilot

Enquire now – free initial consultation

Would you like to have call logs from an Android device professionally examined? LanCologne can assist you with an objective IT forensic analysis and comprehensive expert documentation.

RELATED TOPICS

You might also be interested in

FREQUENTLY ASKED QUESTIONS

Frequently Asked Questions

Click on a question to see the answer.

Are all calls recorded?
The entries available depend on the version of Android, the phone app and any deletions that may have been made.
Are VoIP calls also relevant?
Yes. Depending on the application used, additional artefacts may be present.
Can deleted call logs be recovered?
That depends on the data set and the artefacts available.
Do timestamps play an important role?
Yes. They enable us to place communication events in a chronological order.
Could an expert report be drawn up on this matter?
Yes. The results are documented in a transparent manner and assessed from a technical perspective.