MOBILE FORENSICS

Forensic analysis of Samsung Gallery on Android

Samsung Gallery is the default photo management app on many Samsung devices. As part of an Android forensic investigation, local image and video data, as well as a wide range of metadata, can be analysed.

Local image and video files
EXIF metadata
Thumbnails
Recycle bin information
Album and collection details
SQLite databases
Cache files
Timestamps and metadata
Synchronisation information (where available)

TECHNICAL BACKGROUND

Technical Fundamentals

Forensically relevant artefacts may include, amongst other things:

  • Local image and video files
  • EXIF metadata
  • Thumbnails
  • Recycle bin information
  • Album and collection details
  • SQLite databases
  • Cache files
  • Timestamps and metadata
  • Synchronisation information (where available)

The type and scope of the available data depend on the device generation, the Android version and the app settings.

OUR APPROACH

This is how your examination will be carried out

A transparent process – from the initial enquiry to the handover of the report.

1
Following a suitable forensic data backup, image files, databases, metadata and other artefacts are examined using recognised IT forensic tools and manual analysis. All stages of the investigation are documented in a reproducible manner and assessed solely on the basis of objective technical findings.
2
LanCologne produces expert reports for private individuals, as well as for companies and solicitors. Our reports have already been used in court proceedings. In some cases, we have been directly commissioned to produce IT forensic reports. Upon request, we can provide anonymised or redacted sample reports or extracts.

TYPICAL QUESTIONS

When is this analysis required?

  • What photos and videos are available?
  • What EXIF data is available?
  • What information does the Recycle Bin contain?
  • What time-related information can be analysed?
  • How significant are the existing artefacts?

LIMITATIONS & CONCLUSION

What you should know

Deleted files, overwritten storage areas or missing metadata may limit the scope of the analysis. Conclusions are drawn solely on the basis of the technical artefacts that are actually present.

Samsung Gallery often contains valuable clues regarding the use of a device. Only by evaluating all available artefacts together is it possible to arrive at a reliable IT forensic assessment.

CUSTOMER REVIEWS

What our customers say

4.8 out of 5 stars on Trustpilot · 54 reviews

★★★★★

“The highest standards of professionalism, prompt service and excellent communication. They made the seemingly impossible a reality. This is what genuine customer service is all about – unrivalled in Germany!”

idalein

Verified review on Trustpilot

★★★★★

“Very helpful advice, excellent responsiveness and communication. My problem was completely resolved and the lost data was recovered. I’m very satisfied and, of course, relieved!”

Layla Pankratz

Verified review on Trustpilot

★★★★★

“My problem was sorted out professionally and quickly; everyone I spoke to was always friendly, and I can still get in touch if I have any questions – I’m very grateful for that!”

a woman from Cologne

Verified review on Trustpilot

Enquire now – free initial consultation

Would you like to have images or videos from a Samsung device examined by professionals? LanCologne can assist you with an objective IT forensic analysis and comprehensive expert documentation.

FREQUENTLY ASKED QUESTIONS

Frequently Asked Questions

Click on a question to see the answer.

Is EXIF metadata analysed?
Yes. Where available, details such as the time the image was taken, camera information and GPS data are analysed.
Can the Recycle Bin be of forensic significance?
Yes. It can provide evidence of deleted media.
Are videos analysed as well?
Yes. Videos and their metadata are regularly included in an investigation.
Are thumbnails important?
Yes. You can provide further information about existing or deleted media.
Could an expert report be drawn up on this matter?
Yes. The results are documented in a transparent manner and assessed from a technical perspective.