Performance of Android Forensics Data Recovery Tools
Bernard Chukwuemeka Ogazi-Onyemaechi, Ali Dehghantanha, Kim-Kwang, Raymond Choo

TL;DR
This paper evaluates the effectiveness of various Android data recovery tools in recovering deleted or hidden data from Samsung Galaxy S2 devices, highlighting their varying capacities and specialized use cases.
Contribution
It provides a comparative analysis of multiple forensic data recovery tools specifically for Android smartphones, revealing their strengths and limitations.
Findings
Recovery capacities vary significantly among tools.
Tools are suitable only for specific recovery scenarios.
Some tools recover more data than others in tested conditions.
Abstract
Recovering deleted or hidden data is among most important duties of forensics investigators. Extensive utilisation of smartphones as subject, objects or tools of crime made them an important part of residual forensics. This chapter investigates the effectiveness of mobile forensic data recovery tools in recovering evidences from a Samsung Galaxy S2 i9100 Android phone. We seek to determine the amount of data that could be recovered using Phone image carver, Access data FTK, Foremost, Diskdigger, and Recover My File forensic tools. The findings reflected the difference between recovery capacities of studied tools showing their suitability in their specialised contexts only.
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
