Sign In Start Free Trial
Account

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Learning Android Forensics
  • Toc
  • feedback
Learning Android Forensics

Learning Android Forensics

4.2 (6)
close
Learning Android Forensics

Learning Android Forensics

4.2 (6)

Overview of this book

If you are a forensic analyst or an information security professional wanting to develop your knowledge of Android forensics, then this is the book for you. Some basic knowledge of the Android mobile platform is expected.
Table of Contents (10 chapters)
close
9
Index

Contacts/call analysis

Contacts and call logs are stored in the same database. Contacts do not have to be added explicitly by the user. They may be autofilled when an e-mail is sent through Gmail, or a person is added on Google+, or possibly many other ways.

Package name: com.android.providers.contacts

Version: Default version with Android 5.0.1 (not listed within app)

Files of interest:

  • /files/
    • photos/
    • profile/
  • /databases/
    • contacts2.db

The files directory contains photos for the user's contacts in the photos directory and the user's profile photo in the profile directory.

The contacts2.db database contains all of the information about calls made to and from the device and all contacts in the user's Google account. It contains the following tables:

Table

Description

accounts

This shows the accounts on the device that have access to the contacts list. At least one of the accounts will show the user's Google account e-mail address. This list may include third-party apps installed...

bookmark search playlist font-size

Change the font size

margin-width

Change margin width

day-mode

Change background colour

Close icon Search
Country selected

Close icon Your notes and bookmarks

Delete Bookmark

Modal Close icon
Are you sure you want to delete it?
Cancel
Yes, Delete