Magnet Forensics has published a fresh white paper: “Demystifying Android Marshmallow Forensic Analysis”.
Reading the paper you will learn:
- Why Marshmallow’s built-in encryption isn’t necessarily the end of the forensic line
- How to bypass new and different levels of data obfuscation
- Where – and more importantly, how – to find the right data partition
- How adoptable storage changes your forensic process for microSD cards
You can download it here.