MOBILE FORENSICS
Forensic analysis of installed apps (Android)
Installed applications are among the most important sources of data in an Android forensic investigation. Messaging, browser, email, banking and social media apps store a wide range of technical information which – depending on the data available – can provide insights into usage, communication and chronological sequences.
TECHNICAL BACKGROUND
Technical Fundamentals
Android generally isolates applications using a sandbox approach. Each app has its own memory space and defined permissions.
Forensically relevant artefacts may include, amongst other things:
- •SQLite databases
- •XML files (Shared Preferences)
- •Cache files
- •Log files
- •Configuration files
- •Media and document files
- •App permissions
- •Timestamps and metadata
Storage locations and data structures vary depending on the app, Android version and manufacturer.
OUR APPROACH
This is how your examination will be carried out
A transparent process – from the initial enquiry to the handover of the report.
TYPICAL QUESTIONS
When is this analysis required?
- ✔Which apps are installed?
- ✔What data does a particular application store?
- ✔What permissions have been granted?
- ✔Can communication or usage data be traced?
- ✔Which artefacts are relevant to the research question?
LIMITATIONS & CONCLUSION
What you should know
Not every application stores the same information. Device encryption, authorisation schemes, app-specific settings or data deletion processes can affect the range of artefacts available. Missing data does not allow for general conclusions to be drawn about a lack of usage.
Analysing installed Android apps often provides key insights into a device’s usage patterns. The significance of the results stems from the combined evaluation of all available technical artefacts.
CUSTOMER REVIEWS
What our customers say
4.8 out of 5 stars on Trustpilot · 54 reviews
“The highest standards of professionalism, prompt service and excellent communication. They made the seemingly impossible a reality. This is what genuine customer service is all about – unrivalled in Germany!”
idalein
Verified review on Trustpilot
“Very helpful advice, excellent responsiveness and communication. My problem was completely resolved and the lost data was recovered. I’m very satisfied and, of course, relieved!”
Layla Pankratz
Verified review on Trustpilot
“My problem was sorted out professionally and quickly; everyone I spoke to was always friendly, and I can still get in touch if I have any questions – I’m very grateful for that!”
a woman from Cologne
Verified review on Trustpilot
Enquire now – free initial consultation
Would you like to have the data from installed Android apps professionally examined? LanCologne can assist you with an objective IT forensic analysis and comprehensive expert documentation.
RELATED TOPICS
You might also be interested in
FREQUENTLY ASKED QUESTIONS
Frequently Asked Questions
Click on a question to see the answer.