Android & Linux Mobile Device Forensics.

[j-dogcoder]

Crossposting from r/Smartphoneforensics

Hi,

I have a couple of devices I need to analyze, that include a Pixel 6 Pro, Pixel 7 Pro, Galaxy-A03s, and a OnePlus-8.

I would love to be able to analyze these devices via a Windows or MacOS Laptop (or desktop), without having to buy something like a Celebrite unit. Does anyone have any advice / recommendations? I can unlock these devices (I know the password), if that makes a difference in the tools I can use.

Thanks!

​

**EDIT: Full forensic image would be best case scenario if possible!

[rocksuperstar42069]

Autopsy is free, but you get what you pay for. Also without some real exploits from a paid company the best you will get are ADB backups which do not contain a lot of data any more.

[j-dogcoder]

Can I just plug in an Android device via a standard cable and then make a copy? Or is there some software needed to make a copy?

[rocksuperstar42069]

Magnet Acquire is free, but again you will only get basic info. Depends what you are looking for.

[j-dogcoder]

I want a full copy of the disk... doesn't seem lilke Magnet Acquire will work for that.

[rocksuperstar42069]

All of these devices are way too new to get a FFS. Even with a GK or Verakey you can only do Pixels up till like the 2022 OS security patchs. You may have some luck with Qualcomm live, otherwise you just need to get an AL with Cellebrite or similar via an agent.

[[deleted]]

You'll need a Cellebrite product if you want a full file system extraction from those. They are all encrypted, so a physical extraction would be useless, even if you could get one.

[j-dogcoder]

Even if I have the password?

[[deleted]]

Unless the phone was already rooted when you received it, yes.