# Android create complete physical image

**URL:** <https://sleuthkit.discourse.group/t/android-create-complete-physical-image/1069>\
**Category:** Autopsy Help\
**Created:** [April 20, 2020, 12:54pm UTC](https://sleuthkit.discourse.group/t/android-create-complete-physical-image/1069 "2020-04-20T12:54:23Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Daimones](https://avatars.discourse-cdn.com/v4/letter/d/bc79bd/32.png) [@Daimones](https://sleuthkit.discourse.group/u/Daimones)\
**Post date:** [April 20, 2020, 12:54pm UTC](https://sleuthkit.discourse.group/t/android-create-complete-physical-image/1069/1 "2020-04-20T12:54:23Z")

</div>

First of all I want to thank you for this fantastic course. I searched here in the forum but found no answer. The question is as follows. I have an Android without root and with the bootloader blocked, to create a complete physical image (folder \ data) I have to root, but to root I have to unlock the bootloader, but if I create the bootloader socket. … automatically all data will be lost. How can I do? Also, if you’ve had a rooted Android, the \ data folder will still be encrypted, right? To get a readable image of the folder, I will have to mount the \ data folder and make an image with the device turned on. Quite right?

---

<div class="post-metadata">

**Author:** ![apriestman](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/apriestman/32/24_2.png) [@apriestman](https://sleuthkit.discourse.group/u/apriestman)\
**Post date:** [April 20, 2020, 2:02pm UTC](https://sleuthkit.discourse.group/t/android-create-complete-physical-image/1069/2 "2020-04-20T14:02:07Z")

</div>

Others here may be able to help more, but this is outside of what Autopsy can do. I suggest googling how to image an android phone.

---

<div class="post-metadata">

**Author:** ![Daimones](https://avatars.discourse-cdn.com/v4/letter/d/bc79bd/32.png) [@Daimones](https://sleuthkit.discourse.group/u/Daimones)\
**Post date:** [April 20, 2020, 5:10pm UTC](https://sleuthkit.discourse.group/t/android-create-complete-physical-image/1069/3 "2020-04-20T17:10:39Z")

</div>

Thanks for the answer, yes I know that the image cannot be created with Autopsy. I hope someone can help me, I have seen a lot on google, but I can’t find it. I finished the course and it was really nice !! Thanks again for the opportunity to take this certificate.

---

<div class="post-metadata">

**Author:** ![atdt0](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/atdt0/32/202_2.png) [@atdt0](https://sleuthkit.discourse.group/u/atdt0)\
**Post date:** [April 20, 2020, 9:42pm UTC](https://sleuthkit.discourse.group/t/android-create-complete-physical-image/1069/4 "2020-04-20T21:42:34Z")

</div>

Hello.

It depends on your make/model/OS version of the phone. You are correct that if you unlock the bootloader that your userdata will be erased. If you have a Qualcomm based device you might be able to use EDL mode to get a physical extraction. For some Android devices you might be able to find an ENG root which can get you raw access and then you can get a physical extraction. Getting data off via JTAG may also be an option. If this is a phone that you have full access to and can place in Developer Mode, and have access to some commercial tools, then perhaps a “Smart ADB” option may exist. It all depends on the device!

---

<div class="post-metadata">

**Author:** ![Daimones](https://avatars.discourse-cdn.com/v4/letter/d/bc79bd/32.png) [@Daimones](https://sleuthkit.discourse.group/u/Daimones)\
**Post date:** [April 21, 2020, 6:24am UTC](https://sleuthkit.discourse.group/t/android-create-complete-physical-image/1069/5 "2020-04-21T06:24:28Z")

</div>

I thank you for the exhaustive answer. Just yesterday evening he was reading about these methods including jtag.  
[https://resources.infosecinstitute.com/category/computerforensics/introduction/mobile-forensics/the-mobile-forensics-process-steps-types/#gref](https://resources.infosecinstitute.com/category/computerforensics/introduction/mobile-forensics/the-mobile-forensics-process-steps-types/#gref)
