Showing posts with label Andoid. Show all posts
Showing posts with label Andoid. Show all posts

Sunday, April 21, 2013

Android Data Extractor Lite

Android Data Extractor Lite

The author of this tools states:

"This Python script dumps all important SQLite Databases from a connected Android smartphone to the local disk and analyzes these files in a forensically accurate workflow. If no smartphone is connected you can specify a local directory which contains the databases you want to analyze. Afterwards this script creates a clearly structured XML report.

If you connect a smartphone you need a rooted and insecure kernel or a custom recovery installed on the smartphone.

ADEL needs a predefined configuration for each device to work proper."

https://github.com/mspreitz/ADELhttps://github.com/mspreitz/ADEL/tree/master/xml

Saturday, May 05, 2012

Delete GPS Movements




Delete GPS Movements

I noticed an interesting app that promotes enhancing GPS location positioning using A-GPS where the app tweaks the accuracy of the results. Invariably, apps like these are generated to help users improve finding their whereabouts or where they have been. An app I am aware is GPS Status and Toolbox (https://play.google.com/store/apps/details?id=com.eclipsim.gpsstatus2) developed for Android and using the output positioning data for importing into Google Maps.

I noted in the install guide the app will delete cached GPS data:

Step 4
"Start the GPS Status and Toolbox app. Press the menu key to go to the tools menu and choose 'Manage A-GPS state' from the popped up menu."




Step 5



"After choosing 'Manage A-GPS', press the reset key to wipe out all the A-GPS data your phone must have collected. Switch off the smartphone and wait for the device to automatically gain data connectivity."

Should the app user do no more after Step 5 then the cached GPS data is lost. Clearly, there could be an evidential discovery issue here. Metadata already embedded in existing photos are unlikely to be affected.