Android Forensic Suite

Abstract

The Android Forensic Suite is a native forensics solution that aims to provide law enforcement agencies with a comprehensive set of tools for non-destructive, forensically sound data acquisition from Android devices. This project aligns with SDG#09 and SDG#16, Industry Innovation and Infrastructure, and Peace, Justice and Strong Institutions. The suite uses ReactJS for the frontend NodeJS for implementation of the backend. The project includes a data acquisition module, data reporting module, frontend GUI, and a user manual. The project also has design and implementation constraints, as well as external interface requirements. The project provides a cheap and effective solution that allows for additional functionality to be added on demand. The Android Forensics Suite uses a client-server model where the processing is done on a server, usually remote but can be deployed locally. So, connection is done at client-end and connection is established to the remote backend server using WebADB and other libraries. The backend server then starts the process of creating the image, which is basically an archive of the android filesystem. This image is uploaded, and the rest of the processing takes place on the server side. Android Forensics Suite can be delivered as a SaaS hosted on any popular public cloud provider.