I think this is the first android digital forensics application and it's so helpful.
In an effort to give back to the community, we have released our logical Android Forensic application as open source. You can download it on Google Code and additional details are on my blog.
The application was developed with a generic architecture which will allow other programmers to easily add support for new applications and data sources. Currently, we pull the following information in CSV files on the SD Card:
- Browser history
- Call logs
- Contact Methods (email, phones, etc.)
- Organizations (companies that contacts are in)
- People (the individual people)
Browser History Example
if you want detail of this part, please go to the Source.
How to install
If you have an Android device (or run the emulator from the SDK), you can install the application (an .apk file).
To do this, you can either download the application online and install directly however you need to enable the Settings -> Application Settings -> Unknown sources option (until we sign the .apk which we hope to do soon).
An alternate method (and my preference) is to install using the Android Debug Bridge (adb). To do this, you must first install the Android SDK on your workstation. For Windows, you need to install the USB drivers and on Linux you must tweak udev but there are plenty of online tutorials about this. You also need to enable USB Debugging on the phone, which you can do under Settings -> Application Settings -> Development -> USB Debugging.
Download the AndroidForensics.apk from Google Code and save it to c:\\af. Connect the Android device to your computer via USB and do the following from a cmd prompt:
List of devices attached
C:\\af>adb install AndroidForensics.apk
419 KB/s (20138 bytes in 0.046s)
On phone, run viaForensics application and click capture
You will receive a message when the application completes
Copy CSV files to computer
C:\\af>adb pull /sdcard/forensics c:\\af
pull: building file list...
pull: /sdcard/forensics/20100225.0915.SMS.csv -> c:\\af/20100225.0915.SMS.csv
pull: /sdcard/forensics/20100225.0915.People.csv -> c:\\af/20100225.0915.People.csv
pull: /sdcard/forensics/20100225.0915.Organizations.csv -> c:\\af/20100225.0915.Organizations.csv
pull: /sdcard/forensics/20100225.0915.ContactMethods.csv -> c:\\af/20100225.0915.ContactMethods.csv
pull: /sdcard/forensics/20100225.0915.CallLogCalls.csv -> c:\\af/20100225.0915.CallLogCalls.csv
pull: /sdcard/forensics/20100225.0915.Browser.csv -> c:\\af/20100225.0915.Browser.csv
6 files pulled. 0 files skipped.
30 KB/s (38729 bytes in 1.249s)
If you want to download or talk to this developer, please go to the Source.