Mastering Mobile Forensics
'Mastering Mobile Forensics' by Soufiane Tahiri is a technical guide to mobile device security, application penetration testing, and digital forensics on the Android platform. The text details the mobile threat landscape, internal security architectures, and offensive testing methodologies aligned with the OWASP Mobile Application Security Testing Guide (MASTG).
Key topics include APK decompilation, static code analysis with JADX and Apktool, dynamic runtime instrumentation with Frida, SSL pinning bypass, insecure data storage, inter-process communication (IPC) vulnerabilities, and mobile evidence recovery. Detailed workflows guide readers through auditing mobile apps.
Essential for mobile app developers, penetration testers, and digital forensic investigators specializing in mobile ecosystem security.
Key topics include APK decompilation, static code analysis with JADX and Apktool, dynamic runtime instrumentation with Frida, SSL pinning bypass, insecure data storage, inter-process communication (IPC) vulnerabilities, and mobile evidence recovery. Detailed workflows guide readers through auditing mobile apps.
Essential for mobile app developers, penetration testers, and digital forensic investigators specializing in mobile ecosystem security.
Contents at a Glance
Chapter 1: Digital Forensics Principles and Chain of Custody
Chapter 2: Evidence Acquisition: Disk Imaging, E01, and Raw DD Formats
Chapter 3: File System Analysis: NTFS, FAT32, exFAT, and EXT4
Chapter 4: Forensic Toolkits: Autopsy, FTK Imager, and EnCase Workflows
Chapter 5: Windows Artifact Analysis: Registry, Prefetch, Shimcache, and Shellbags
Chapter 6: Browser Forensics: History, Cookies, Cache, and Downloads
Chapter 7: Memory Forensics: RAM Capture and Volatility Framework Analysis
Chapter 8: Timeline Analysis, Correlation, and Forensic Report Writing
Index & Further Reading
Chapter 1: Digital Forensics Principles and Chain of Custody
Chapter 2: Evidence Acquisition: Disk Imaging, E01, and Raw DD Formats
Chapter 3: File System Analysis: NTFS, FAT32, exFAT, and EXT4
Chapter 4: Forensic Toolkits: Autopsy, FTK Imager, and EnCase Workflows
Chapter 5: Windows Artifact Analysis: Registry, Prefetch, Shimcache, and Shellbags
Chapter 6: Browser Forensics: History, Cookies, Cache, and Downloads
Chapter 7: Memory Forensics: RAM Capture and Volatility Framework Analysis
Chapter 8: Timeline Analysis, Correlation, and Forensic Report Writing
Index & Further Reading
