I follow the training of Autopsy and how to analyze the Image taken from either android or other OS
but for previous step, how to take and Image of Android device, what is the best solution to do that?
Does the Autopsy do it?
Thanks in advance!
I follow the training of Autopsy and how to analyze the Image taken from either android or other OS
but for previous step, how to take and Image of Android device, what is the best solution to do that?
Does the Autopsy do it?
Thanks in advance!
That question opens a can of worms: the is no single method to image an Android device. It depends on device make and model, processor type/make/model, storage chips, Android OS version, whether the device is rooted or can be rooted, and your available equipment.
I’ve found this description of imaging a rooted Android, which appears to be correct upon quick read. It uses open source tools to do the imaging and is a good place to start.
And no, Autopsy cannot image an Android.
this tools used after Rooting the devices, so if the Police station needs to investigate on a case, they have to wait until that android device will rooted?