Sign In Start Free Trial
Account

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Learning Android Forensics
  • Toc
  • feedback
Learning Android Forensics

Learning Android Forensics

4.2 (6)
close
Learning Android Forensics

Learning Android Forensics

4.2 (6)

Overview of this book

If you are a forensic analyst or an information security professional wanting to develop your knowledge of Android forensics, then this is the book for you. Some basic knowledge of the Android mobile platform is expected.
Table of Contents (10 chapters)
close
9
Index

Recovering data deleted from an SD card

Data present on an SD card can reveal a lot of information that is useful during a forensic investigation. The fact that pictures, videos, voice recordings, application data, and so on are stored on the SD card adds weight to this. As mentioned in the previous chapters, Android devices often use the FAT32 filesystem on the SD card. The main reason for this is that the FAT32 filesystem is widely supported in most operating systems, including Windows, Linux, and Mac OS X. The maximum file size on a FAT32-formatted drive is around 4 GB. With increasingly high resolution formats that are now available, this limit is commonly reached. Recovering the data deleted from an external SD can be pretty easy if it can be mounted as a drive.

If the SD card is removable, it can be mounted as a drive by connecting it to a computer using a card reader. Any files can be transferred to the SD card while it's mounted. Some of the older devices that use USB mass storage...

bookmark search playlist font-size

Change the font size

margin-width

Change margin width

day-mode

Change background colour

Close icon Search
Country selected

Close icon Your notes and bookmarks

Delete Bookmark

Modal Close icon
Are you sure you want to delete it?
Cancel
Yes, Delete