diff --git a/Andriod10/0_Intro_Pixel3_Andriod10.pptx b/Andriod10/0_Intro_Pixel3_Andriod10.pptx new file mode 100644 index 0000000..e708be7 Binary files /dev/null and b/Andriod10/0_Intro_Pixel3_Andriod10.pptx differ diff --git a/Andriod10/1_Pixel3_Image.pptx b/Andriod10/1_Pixel3_Image.pptx new file mode 100644 index 0000000..70d3ec4 Binary files /dev/null and b/Andriod10/1_Pixel3_Image.pptx differ diff --git a/Andriod10/2_Pixel3_Device_Investigation.pptx b/Andriod10/2_Pixel3_Device_Investigation.pptx new file mode 100644 index 0000000..4b1babf Binary files /dev/null and b/Andriod10/2_Pixel3_Device_Investigation.pptx differ diff --git a/Andriod10/3_Pixel3_System_settings.pptx b/Andriod10/3_Pixel3_System_settings.pptx new file mode 100644 index 0000000..501d4a7 Binary files /dev/null and b/Andriod10/3_Pixel3_System_settings.pptx differ diff --git a/Andriod10/4_Overivew_App_Life_Cycle.pptx b/Andriod10/4_Overivew_App_Life_Cycle.pptx new file mode 100644 index 0000000..ddb9fda Binary files /dev/null and b/Andriod10/4_Overivew_App_Life_Cycle.pptx differ diff --git a/Andriod10/5_1_1_AOSP_App_Investigations_Messaging.pptx b/Andriod10/5_1_1_AOSP_App_Investigations_Messaging.pptx new file mode 100644 index 0000000..cbab587 Binary files /dev/null and b/Andriod10/5_1_1_AOSP_App_Investigations_Messaging.pptx differ diff --git a/Andriod10/5_1_2_AOSP_App_Investigations_Contacts.pptx b/Andriod10/5_1_2_AOSP_App_Investigations_Contacts.pptx new file mode 100644 index 0000000..1ca527c Binary files /dev/null and b/Andriod10/5_1_2_AOSP_App_Investigations_Contacts.pptx differ diff --git a/Andriod10/5_1_3_AOSP_App_Investigations_Calendar.pptx b/Andriod10/5_1_3_AOSP_App_Investigations_Calendar.pptx new file mode 100644 index 0000000..a762b79 Binary files /dev/null and b/Andriod10/5_1_3_AOSP_App_Investigations_Calendar.pptx differ diff --git a/Andriod10/5_2_1_GMS_App_Investigations_Messaging.pptx b/Andriod10/5_2_1_GMS_App_Investigations_Messaging.pptx new file mode 100644 index 0000000..85efedd Binary files /dev/null and b/Andriod10/5_2_1_GMS_App_Investigations_Messaging.pptx differ diff --git a/Andriod10/5_2_2_GMS_App_Investigations_Dialer.pptx b/Andriod10/5_2_2_GMS_App_Investigations_Dialer.pptx new file mode 100644 index 0000000..99d7e73 Binary files /dev/null and b/Andriod10/5_2_2_GMS_App_Investigations_Dialer.pptx differ diff --git a/Andriod10/5_2_3_GMS_App_Investigations_Maps.pptx b/Andriod10/5_2_3_GMS_App_Investigations_Maps.pptx new file mode 100644 index 0000000..b9a97f9 Binary files /dev/null and b/Andriod10/5_2_3_GMS_App_Investigations_Maps.pptx differ diff --git a/Andriod10/5_2_4_GMS_App_Investigations_Photos.pptx b/Andriod10/5_2_4_GMS_App_Investigations_Photos.pptx new file mode 100644 index 0000000..3405d32 Binary files /dev/null and b/Andriod10/5_2_4_GMS_App_Investigations_Photos.pptx differ diff --git a/Andriod10/5_3_1_Third_Party_App_Investigation_kik.pptx b/Andriod10/5_3_1_Third_Party_App_Investigation_kik.pptx new file mode 100644 index 0000000..85319ba Binary files /dev/null and b/Andriod10/5_3_1_Third_Party_App_Investigation_kik.pptx differ diff --git a/Andriod10/5_3_2_Third_Party_App_Investigation _textnow.pptx b/Andriod10/5_3_2_Third_Party_App_Investigation _textnow.pptx new file mode 100644 index 0000000..64dd5f8 Binary files /dev/null and b/Andriod10/5_3_2_Third_Party_App_Investigation _textnow.pptx differ diff --git a/Andriod10/5_3_3_Third_Party_App_Investigation_whatsapp.pptx b/Andriod10/5_3_3_Third_Party_App_Investigation_whatsapp.pptx new file mode 100644 index 0000000..58ac44a Binary files /dev/null and b/Andriod10/5_3_3_Third_Party_App_Investigation_whatsapp.pptx differ diff --git a/Andriod10/6_Pixel3_rooting.pptx b/Andriod10/6_Pixel3_rooting.pptx new file mode 100644 index 0000000..3d60944 Binary files /dev/null and b/Andriod10/6_Pixel3_rooting.pptx differ diff --git a/README.md b/README.md index f2882a4..200fefb 100644 --- a/README.md +++ b/README.md @@ -34,13 +34,16 @@ - [Data Carving](/Basic_Computer_Skills_for_Forensics/9_Data_Carving.pptx) - [Steganography](/Basic_Computer_Skills_for_Forensics/10_Steganography.pptx) - [Forensic Report Template](/Basic_Computer_Skills_for_Forensics/Forensic_Report_Template.pdf) -- Case Study +- Computer Forensics Case Study - [Investigating P2P Data Leakage](#Investigating-P2P-Data-Leakage) (added on June 2021) - [Investigating NIST Data Leakage](#Investigating-NIST-Data-Leakage) - [Investigating Illegal Possession of Images](#Investigating-Illegal-Possession-of-Images "Networking forensics") - [Investigating Email Harassment](#Investigating-Email-Harassment) - [Investigating Illegal File Transferring (Memory Forensics)](#Investigating-illegal-File-Transferring "Memory Forensics") - [Investigating Hacking Case](#Investigating-Hacking-Case) +- Mobile Forensics Case Study + - [Investigating Android 10](#Investigating-Android-10) (added on Oct 2021) + - iOS 13 (to be released...) - Forensic Intelligence Repository - [Email forensics](/STIX_for_digital_forensics/Email_Harassment) - [Illegal Possession of Images](/STIX_for_digital_forensics/Illegal_Possession_Images) @@ -173,6 +176,10 @@ The [case study](https://github.com/frankwxu/digital-forensics-lab/tree/main/Ill The [case study](https://github.com/frankwxu/digital-forensics-lab/tree/main/NIST_Hacking_Case), including a disk image provided by [NIST](https://www.cfreds.nist.gov/Hacking_Case.html) is to investigate a hacker who intercepts internet traffic within range of Wireless Access Points. Note that the PPT is encrypted with a password as one of the major assignments. Email fxu at ubalt dot edu to ask the password if you are a faculty member. +### Investigating Android 10 + +========= + **Topics Covered** | Labs | Topics Covered | Size of PPTs |