A MOBILE RECOVERY TOOL USING LIVE ACQUISITION APPROACH

Abstract

This thesis focuses on file carving which is a forensic technique to retrieve the data without using any file system or metadata. Especially focus is on recovering the mobile data from smart phones. In today’s scenario Google’s Android operating system is most popular operating system for smart phones; So many big companies are using android in mobile phones example: Samsung, Sony Ericsson, LG etc. In all mobile phones, data acquisition is an important part in forensics. As the mobile forensic software becomes more strong and popular, most of them are now facing the problem where to internal collecting tools must be installed in the mobile phones first so that the data collecting could be started in order vice. Proper forensic examination of such memories, including recovery of deleted items, has not been possible until now. So our process is usable after the OS is corrupt or not booting and we want to recover a data through this new concept called Live acquisition approach. We are trying to boot the phone from SD card with some recovery software’s and all tools work at boot time. It utilizes the concept of data recovery to perform physical data acquisition in Android smart phones. This data-acquisition methodology differs from the current ones in most mobile forensics software and can effectively perform the recovery of the deleted data.