Skip to content
KitploitKITPLOIT
도구블로그
제출
도구블로그
제출

해킹, 침투 테스트 및 사이버 보안 도구를 당신의 보안 무기고에!

Kitploit은 해킹, 사이버 보안 및 침투 테스트 도구 디렉토리입니다. 최신 프로젝트 업데이트를 발견하여 취약점을 찾고, 시스템을 분석하고, 테스트를 자동화하고, 보안을 강화하세요.

··피드·문의·개인정보·© 2026 Kitploit

도구 디렉토리

카테고리

모든 카테고리 보기
Loading categories
Android-Forensics-References — Android 포렌식 아티팩트 및 로그 경로에 대한 선별된 참고 자료로, CTF 라이트업, 연구 논문, 모바일 기기 분석 도구에 대한 링크를 포함합니다. | Kitploit
도구/GitHubGitHub/realitynet/android-forensics-references
Mobile ForensicsDigital ForensicsCTFPapers & ResearchLearning & EducationCurated ResourcesLearning Paths & Courses
GitHubrealitynet/android-forensics-references

Android-Forensics-References

인기

모두 보기 →

커뮤니티에서 가장 많이 사용되는 도구를 찾아보세요.

모든 도구 탐색

도구 컬렉션을 둘러보세요

모든 도구 보기 →
공유

Android 포렌식 아티팩트 및 로그 경로에 대한 선별된 참고 자료로, CTF 라이트업, 연구 논문, 모바일 기기 분석 도구에 대한 링크를 포함합니다.

저장소 보기
3583911개월 전Kitploit 검토 완료

Android 포렌식 참고 자료

마지막 업데이트: 2025년 9월 22일

USERDATA 파티션

"/log" 폴더

  • /log/wifi/iwc/iwc_dump.txt
    • Cellebrite CTF 2023 요약: Sharon의 Android에 대한 답변
      https://cellebrite.com/en/cellebrite-ctf-2023-recap-sharons-android/
  • /log/netstats
  • /log/batterystats
    • Cellebrite CTF 2021 - Heisenberg의 Android
      https://www.stark4n6.com/2021/10/cellebrite-ctf-2021-heisenbergs-android.html
    • 1부: 2021 CTF 답변 분석 – Heisenberg의 Android 기기 조사
      https://cellebrite.com/en/part-1-walk-through-of-answers-to-the-2021-ctf-investigating-heisenbergs-android-device/
    • 배터리 방전으로 인한 Android 기기 전원 꺼짐의 아티팩트
      https://instatronic.com/artefacts-of-android-device-power-off-due-to-depleted-battery
  • /log/recovery
  • /log/sdp_log
    • iOS 및 Android 기기에서 수집할 수 있는 8가지 로그 파일
      https://www.magnetforensics.com/blog/8-log-files-you-can-collect-from-ios-and-android-devices/
  • /log/thermal_log
  • /log/power_off_reset_reason.txt
    • DeRR.p. Samsung 기기의 전원 이벤트 조사
      https://thebinaryhick.blog/2024/04/07/__trashed/
    • Samsung 전원 꺼짐/리셋 로그
      https://www.stark4n6.com/2021/10/samsung-power-off-reset-logs.html
    • iOS 및 Android 기기에서 수집할 수 있는 8가지 로그 파일
      https://www.magnetforensics.com/blog/8-log-files-you-can-collect-from-ios-and-android-devices/
    • Cellebrite CTF 2021 - Heisenberg의 Android
      https://www.stark4n6.com/2021/10/cellebrite-ctf-2021-heisenbergs-android.html
    • 배터리 방전으로 인한 Android 기기 전원 꺼짐의 아티팩트
      https://instatronic.com/artefacts-of-android-device-power-off-due-to-depleted-battery
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/powerOffReset.py

"/misc" 및 "/misc_de" 폴더

  • /misc/adb/adb_keys
    • Android 시스템 아티팩트: 기기 정보 및 사용량의 포렌식 분석
      https://belkasoft.com/android-system-artifacts-device
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/adb_hosts.py
  • /misc/bluedroiddump/mainBuffer.log
    • 도로 교통 사고에서 운전자의 휴대전화 사용 증거 조사
      https://dfrws.org/sites/default/files/session-files/2015_EU_paper-investigating_evidence_of_mobile_phone_usage_by_drivers_in_road_traffic_accidents.pdf
    • Android 스마트폰의 무선 네트워킹 증거 포렌식 분석
      https://andriotisp.github.io/assets/pdf/wifs12andrio.pdf
  • /misc/bluedroiddump/subBuffer.log
    • Road Trippin’ – Samsung 휴대폰의 Bluetooth 통화 경로 탐색
      https://thebinaryhick.blog/2024/04/16/road-trippin-exploring-bluetooth-call-routes-on-samsung-phones/
  • /misc/bluedroid/bt_config.conf
    • Android Bluetooth 연결로 사고 중 운전자의 손이 핸들 위에 있었는지 확인하는 방법
      https://cellebrite.com/en/how-android-bluetooth-connections-can-determine-if-the-hands-of-a-driver-were-on-the-wheel-during-an-accident/
      https://dfir.pubpub.org/pub/6ysxvhvc/release/1
    • Android Bluetooth 연결 구성
      https://www.stark4n6.com/2021/06/android-bluetooth-connection.html
    • Android Bluetooth
      http://forensafe.com/blogs/Android_Bluetooth.html
    • 방황하는 Android가 모두 길을 잃은 것은 아니다. Android의 Find My Device 네트워크 살펴보기

"/property" 폴더

  • /property/persistent_properties
    • Wipeout! Android 공장 초기화 감지
      https://thebinaryhick.blog/2021/08/19/wipeout-detecting-android-factory-resets/
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/persistentProp.py

"/system", "/system_ce" 및 "/system_de" 폴더

  • /system/appops/
    • Android 12의 개인정보 대시보드 엿보기
      https://thebinaryhick.blog/2022/01/22/snooping-on-android-12s-privacy-dashboard/
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • 사용자가 XYZ 애플리케이션을 사용한 적이 있는가? 일명 모바일 기기에서의 애플리케이션 실행 흔적
      https://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.html
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/discreteNative.py
  • /system/batteryusagestats/
  • /system/job/jobs.xml
  • /system/netstats/
    • 읽은 후 소각: Android 앱의 실행 흔적 삭제
      https://lijuanru.com/publications/nss18.pdf
    • Android 내부 구조
      http://newandroidbook.com/Book/2-Excerpt-Data.pdf
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
  • /system/procstats/
    • Android 내부 구조
      http://newandroidbook.com/Book/2-Excerpt-Data.pdf
  • /system/sync/accounts.xml
    • 모바일 기기의 소유자는 누구인가?
      https://www.digitalforensics.com/blog/articles/who-is-the-owner-of-the-mobile-device/
    • Google Wear OS와 함께 출근 체크인
      https://thebinaryhick.blog/2021/01/13/clockin-in-with-googles-wear-os/

"/user_de" 폴더

  • /user_de/0/com.android.bluetooth/bonddevice.db
    • 로드 트리핀 – 삼성 휴대폰에서의 블루투스 통화 경로 탐구
      https://thebinaryhick.blog/2024/04/16/road-trippin-exploring-bluetooth-call-routes-on-samsung-phones/
    • Collaborative Testing Services - 모바일 디지털 증거 - 2020
      https://cts-forensics.com/reports/20-5550_Web.pdf
  • /user_de/0/com.android.providers.telephony/databases/telephony.db
    • Collaborative Testing Services - 모바일 디지털 증거 - 2021
      https://cts-forensics.com/reports/21-5550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2024
      https://cts-forensics.com/reports/24-5550_Web.pdf
    • Cellebrite CTF 2021 - Heisenberg의 Android
      https://www.stark4n6.com/2021/10/cellebrite-ctf-2021-heisenbergs-android.html
    • Android 시스템 아티팩트: 기기 정보 및 사용 현황에 대한 포렌식 분석
      https://belkasoft.com/android-system-artifacts-device
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • SIM이 많을수록 문제도 많다: 듀얼 SIM 휴대폰 검사
      https://thebinaryhick.blog/2022/12/06/mo-sims-mo-problems-examining-phones-with-dual-sims/
    • 1부: 2021 CTF 답안 분석 – Heisenberg의 Android 기기 조사
      https://cellebrite.com/en/part-1-walk-through-of-answers-to-the-2021-ctf-investigating-heisenbergs-android-device/
    • Cellebrite CTF 2021 라이트업
      https://medium.com/@williamskosasi/cellebrite-ctf-2021-writeup-b73d821a708

"/data" 폴더

Google Digital Wellbeing (com.google.android.apps.wellbeing)

  • /data/com.google.android.apps.wellbeing/databases/app_usage
    • Android (타임)라인 따라가기: Android의 Digital Wellbeing을 사용해 Android 활동을 타임라인으로 정리하기.
      https://thebinaryhick.blog/2020/02/22/walking-the-android-timeline-using-androids-digital-wellbeing-to-timeline-android-activity/
    • Android 시스템 아티팩트: 애플리케이션 사용 현황에 대한 포렌식 분석
      https://belkasoft.com/android-system-artifacts-forensic-analysis-of-application-usage
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • Cellebrite의 CTF 2023 요약: Russell의 Android 기기 답안
      https://cellebrite.com/en/cellebrites-ctf-2023-recap-answers-for-russells-android-device/
    • Android Digital Wellbeing 조사
      https://forensafe.com/blogs/androidDigitalWellbeing.html
    • 사용자가 XYZ 애플리케이션을 사용한 적이 있는가? 일명 모바일 기기에서의 애플리케이션 실행 흔적
      https://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.html
    • 부주의 운전 재구성 – 운전 중 문자 메시지 포렌식
      https://buntingdigitalforensics.us/insights/reconstructing-distraction/
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/wellbeing.py

Samsung Digital Wellbeing (com.samsung.forest)

  • /data/com.samsung.forest/databases/dwbCommon.db
    • Android (타임)라인 따라가기: Android의 Digital Wellbeing을 사용해 Android 활동을 타임라인으로 정리하기.
      https://thebinaryhick.blog/2020/02/22/walking-the-android-timeline-using-androids-digital-wellbeing-to-timeline-android-activity/
    • (그리) 이상한 조합은 아닌 – Samsung의 Rubin과 Digital Wellbeing
      https://thebinaryhick.blog/2025/08/06/not-strange-bedfellows-samsungs-rubin-digital-wellbeing/
    • 사용자가 XYZ 애플리케이션을 사용한 적이 있는가? 일명 모바일 기기에서의 애플리케이션 실행 흔적
      https://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.html
    • Android 시스템 아티팩트: 애플리케이션 사용 현황에 대한 포렌식 분석
      https://belkasoft.com/android-system-artifacts-forensic-analysis-of-application-usage
    • Android Digital Wellbeing 조사
      https://forensafe.com/blogs/androidDigitalWellbeing.html
    • Cellebrite CTF 2023 요약: Sharon의 Android 답안
      https://cellebrite.com/en/cellebrite-ctf-2023-recap-sharons-android/
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/swellbeing.py

Google Docs (com.google.android.apps.docs)

  • /data/com.google.android.apps.docs/databases/cello.db
    • Google Docs - Cello 및 DocList DB
      https://www.stark4n6.com/2020/12/google-docs-cello-doclist-dbs.html
    • Android Google Drive
      https://forensafe.com/blogs/AndroidGoogleDrive.html
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/Cello.py
  • /data/com.google.android.apps.docs/databases/DocList.db
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/DocList.py
    • Google Docs - Cello 및 DocList DB
      https://www.stark4n6.com/2020/12/google-docs-cello-doclist-dbs.html
    • Android Google Drive
      https://forensafe.com/blogs/AndroidGoogleDrive.html
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • 클라우드 스토리지 서비스의 디지털 포렌식 조사
      https://arxiv.org/ftp/arxiv/papers/1709/1709.10395.pdf
    • Android 클라우드 포렌식 - 최종 조사 결과
      http://obrienforensics.blogspot.com/2014/04/final-findings.html
    • NIST 모바일 포렌식 방법을 사용한 Android 기기 내 Google Drive의 디지털 증거 식별
      https://pdfs.semanticscholar.org/b699/e47687819041e2cbf69fa6d6afbd0c6a3fc2.pdf

Files by Google (com.google.android.apps.nbu.files)

  • /data/com.google.android.apps.nbu.files/databases/files_master_database
    • Files by Google: 더 많은 모바일 탐색기 아티팩트
      https://www.stark4n6.com/2021/01/files-by-google-more-mobile-explorer.html
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/FilesByGoogle_FilesMaster.py
  • /data/com.google.android.apps.nbu.files/databases/search_history_database
    • Files by Google: 더 많은 모바일 탐색기 아티팩트
      https://www.stark4n6.com/2021/01/files-by-google-more-mobile-explorer.html
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/FilesByGoogle_SearchHistory.py
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/FilesByGoogle.py
  • /data/com.google.android.apps.nbu.files/databases/search_history_database
    • Files by Google: 더 많은 모바일 탐색기 아티팩트
      https://www.stark4n6.com/2021/01/files-by-google-more-mobile-explorer.html
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/FilesByGoogle_FilesMaster.py
  • /data/com.google.android.apps.nbu.files/databases/search_history_database
    • Files by Google: 더 많은 모바일 탐색기 아티팩트
      https://www.stark4n6.com/2021/01/files-by-google-more-mobile-explorer.html
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/FilesByGoogle_SearchHistory.py
    • aLEAPP 플러그인

Device Health Services (com.google.android.apps.turbo)

  • /data/com.google.android.apps.turbo/databases/turbo.db
    • Turbo DB로 배터리 충전
      https://www.stark4n6.com/2020/12/charging-battery-with-turbo-db.html
    • 2부: CTF 2022 Write Up – Heisenberg의 Android
      https://cellebrite.com/en/part-2-ctf-2022-write-up-heisenbergs-android/
    • Android 시스템 아티팩트: 기기 정보 및 사용량의 포렌식 분석
      https://belkasoft.com/android-system-artifacts-device
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • Magnet User Summit 2023 CTF - Android (2부)
      https://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android_5.html
    • Android Device Health Services 조사
      https://www.forensafe.com/blogs/AndroidDeviceHealthServices.html
    • Turbo Speed: Google의 Device Health Services 파싱
      https://dfir.pubpub.org/pub/4can3p40/release/1
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/Turbo_Battery.py
  • /data/com.google.android.apps.turbo/databases/bluetooth.db
    • Turbo의 재등장 - Bluetooth 기기 배터리 추적
      https://www.stark4n6.com/2021/06/turbo-strikes-again-tracking-bluetooth.html
    • Android 시스템 아티팩트: 기기 정보 및 사용량의 포렌식 분석
      https://belkasoft.com/android-system-artifacts-device
    • Android Device Health Services 조사
      https://www.forensafe.com/blogs/AndroidDeviceHealthServices.html

디바이스 개인화 서비스 (DPS) (com.google.android.as)

  • /data/com.google.android.as/databases/reflection_gel_events.db
    • Android 시스템 아티팩트: 애플리케이션 사용량의 포렌식 분석
      https://belkasoft.com/android-system-artifacts-forensic-analysis-of-application-usage
    • Android (타임)라인 따라가기 2부 – Android의 Device Personalization Services를 활용한 사용자 활동 타임라인
      https://thebinaryhick.blog/2020/05/16/walking-the-android-timeline-part-2-using-androids-device-personalization-services-to-timeline-user-activity/
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/usageapps.py
  • /data/com.google.android.as/databases/SimpleStorage
    • Cellebrite의 CTF 2023 요약: Russell의 Android 기기에 대한 해답
      https://cellebrite.com/en/cellebrites-ctf-2023-recap-answers-for-russells-android-device/
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/SimpleStorage_applaunch.py

설정 서비스 (com.google.android.settings.intelligence)

  • /data/com.google.android.settings.intelligence/databases/battery-usage-db-v4
    • 설정 서비스를 통한 앱 배터리 사용량
      https://www.stark4n6.com/2021/12/application-battery-usage-via-settings.html
    • 멀웨어에 감염된 Android 휴대폰 검사. 이 Android는 정상이 아닙니다.
      https://thebinaryhick.blog/2022/04/09/examining-a-malware-infected-android-phone-this-android-is-not-alright/
    • Android 시스템 아티팩트: 기기 정보 및 사용량의 포렌식 분석
      https://belkasoft.com/android-system-artifacts-device
    • Magnet User Summit 2023 CTF - Android (1부)
      https://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android.html
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/battery_usage_v4.py
  • /data/com.google.android.settings.intelligence/databases/battery-usage-db-v9
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/battery_usage_v9.py
  • /data/com.google.android.settings.intelligence/shared_prefs/setup_wizard_info.xml
    • Wipeout! Android 공장 초기화 탐지
      https://thebinaryhick.blog/2021/08/19/wipeout-detecting-android-factory-resets/
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • aLEAPP 플러그인

Google Play 서비스 (com.google.android.gms)

  • /data/com.google.android.gms/app_semanticlocation_rawsignal_db
    • The Green Look Back. Android의 기기 내 위치 기록
      https://thebinaryhick.blog/2024/06/28/the-green-look-back-androids-on-device-location-history/
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/appSemloc.py
  • /data/com.google.android.gms/app_semanticlocation_placeindex_cache
    • The Green Look Back. Android의 기기 내 위치 기록
      https://thebinaryhick.blog/2024/06/28/the-green-look-back-androids-on-device-location-history/
  • /data/com.google.android.gms/app_semanticlocation_odlh_cache
    • The Green Look Back. Android의 기기 내 위치 기록
      https://thebinaryhick.blog/2024/06/28/the-green-look-back-androids-on-device-location-history/
  • /data/com.google.android.gms/databases/cast.db
    • Android 캐스팅(기기) 이야기: "cast.db"
      https://deagler4n6blog.blogspot.com/2021/01/a-casting-story-castdb.html
    • Android 14 포렌식 첫인상
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/googleCast.py
  • /data/com.google.android.gms/databases/constellation.db
    • Hex Diving — 숨겨진 포렌식 아티팩트를 발견하는 쉬운 방법
      https://cellebrite.com/en/hex-diving-the-easy-way-to-uncover-hidden-forensic-artifacts/
    • Android 14 포렌식 첫인상

Google Play Store (com.android.vending)

  • /data/com.android.vending/databases/data_usage.db
    • Cisco WebEx 데스크톱 클라이언트, 웹 및 Android 스마트폰 애플리케이션의 포렌식 조사
      https://link.springer.com/article/10.1007/s12243-022-00919-6
    • 사용자가 XYZ 애플리케이션을 사용한 적이 있는가? 일명 모바일 기기에서의 애플리케이션 실행 흔적
      https://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.html
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
  • /data/com.android.vending/databases/frosting.db
    • Android 시스템의 애플리케이션 설치 로그 분석
      https://dl.acm.org/doi/10.1145/3297280.3297489
    • 사용자가 XYZ 애플리케이션을 사용한 적이 있는가? 일명 모바일 기기에서의 애플리케이션 실행 흔적
      https://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.html
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • Android 시스템 아티팩트: 애플리케이션 사용의 포렌식 분석
      https://belkasoft.com/android-system-artifacts-forensic-analysis-of-application-usage
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/frosting.py
  • /data/com.android.vending/databases/install_queue.db
    • 사용자가 XYZ 애플리케이션을 사용한 적이 있는가? 일명 모바일 기기에서의 애플리케이션 실행 흔적
      https://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.html
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html

Google Quick Search (com.google.android.googlequicksearchbox)

  • Android의 Google 검색 및 개인 비서 데이터
    http://www.swiftforensics.com/2020/03/google-search-personal-assistant-data.html
  • Google 검색창 및 검색어 기록 – 모든 것을 찾고 계신가요?
    https://thebinaryhick.blog/2019/03/20/google-search-bar-search-term-history-are-you-finding-everything/
  • Google Assistant 포렌식 조사
    https://link.springer.com/article/10.1007/s42979-020-00285-x
  • Android 블루투스 연결로 사고 당시 운전자가 핸들을 잡고 있었는지 확인하는 방법
    https://dfir.pubpub.org/pub/6ysxvhvc/release/1
  • Collaborative Testing Services - 모바일 디지털 증거 - 2016
    https://cts-forensics.com/reports/36550_Web.pdf
  • DroidForensics: 다계층 포렌식 로깅을 통한 Android 공격의 정확한 재구성
    https://kyuhlee.github.io/publications/asiaccs17.pdf
  • 모바일 포렌식 조사: 증거 수집, 분석 및 제시를 위한 가이드 - 제2판
    https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
  • 사용자가 XYZ 애플리케이션을 사용한 적이 있는가? 일명 모바일 기기에서의 애플리케이션 실행 흔적
    https://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.html
  • Magnet User Summit 2023 CTF - Android (2부)
    https://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android_5.html
  • aLEAPP 플러그인
    https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googleQuickSearchbox.py
    https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googleQuickSearchboxRecent.py

Google 서비스 프레임워크 (com.google.android.gsf)

  • /data/com.google.android.gsf/databases/gservices.db
    • Collaborative Testing Services - 모바일 디지털 증거 - 2022
      https://cts-forensics.com/reports/22-5550_Web.pdf
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
  • /data/com.google.android.gsf/databases/googlesettings.db
    • Android 스마트폰의 무선 네트워킹 증거 포렌식 분석
      https://www.fortoo.eu/m/page-media/4/Andriotis-2012-1-wifs.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2018
      https://cts-forensics.com/reports/38550_Web.pdf
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/pSettings.py

메시지 (com.google.android.apps.messaging)

  • /data/com.google.android.apps.messaging/databases/bugle_db
    • Hex Diving — 숨겨진 포렌식 아티팩트를 발견하는 쉬운 방법
      https://cellebrite.com/en/hex-diving-the-easy-way-to-uncover-hidden-forensic-artifacts/
    • Android 메시징 포렌식 – SMS/MMS와 그 너머
      https://www.magnetforensics.com/blog/android-messaging-forensics-sms-mms-and-beyond/
    • Android 14 포렌식 첫인상
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • Magnet User Summit 2023 CTF - Android (1부)
      https://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android.html
    • 모바일 포렌식 조사: 증거 수집, 분석 및 제시 가이드 - 제2판
      https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/googleMessages.py
  • /data/com.google.android.apps.messaging/shared_prefs/sim_state_tracker.xml
    • Magnet Virtual Summit 2025 CTF - Android/b>
      https://www.stark4n6.com/2025/03/magnet-virtual-summit-2025-ctf-android.html

Samsung One UI Home (com.sec.android.app.launcher)

  • 포렌식 추출물에서 Android 앱, 폴더 및 위젯 화면 위치 재구성
    https://abrignoni.blogspot.com/2019/10/recreate-android-apps-folders-and.html

Android 연락처 저장소 (com.android.providers.contacts)

  • /data/com.android.providers.contacts/databases/calllog.db
    • Collaborative Testing Services - 모바일 디지털 증거 - 2020
      https://cts-forensics.com/reports/20-5550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2021
      https://cts-forensics.com/reports/21-5550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2022
      https://cts-forensics.com/reports/22-5550_Web.pdf
    • Hex Diving — 숨겨진 포렌식 아티팩트를 발견하는 쉬운 방법
      https://cellebrite.com/en/hex-diving-the-easy-way-to-uncover-hidden-forensic-artifacts/
    • Android 7.0 Nougat의 Calllog.db 및 SMS 데이터
      https://forensenellanebbia.blogspot.com/2018/10/calllogdb-and-sms-data-on-android-70.html
    • Android 모바일 아티팩트: 범죄 수사에 있어 디지털 증거의 보고 
도구 다운로드

https://thebinaryhick.blog/2024/08/23/not-all-androids-who-wonder-are-lost-a-look-at-androids-find-my-device-network/
  • Android 시스템 아티팩트: 기기 정보 및 사용량의 포렌식 분석
    https://belkasoft.com/android-system-artifacts-device
  • Collaborative Testing Services - 모바일 디지털 증거 - 2015
    https://cts-forensics.com/reports/35550_Web.pdf
  • Collaborative Testing Services - 모바일 디지털 증거 - 2016
    https://cts-forensics.com/reports/36550_Web.pdf
  • Collaborative Testing Services - 모바일 디지털 증거 - 2017
    https://cts-forensics.com/reports/37550_Web.pdf
  • Collaborative Testing Services - 모바일 디지털 증거 - 2019
    https://cts-forensics.com/reports/19-5550_Web.pdf
  • Collaborative Testing Services - 모바일 디지털 증거 - 2020
    https://cts-forensics.com/reports/20-5550_Web.pdf
  • Collaborative Testing Services - 모바일 디지털 증거 - 2021
    https://cts-forensics.com/reports/21-5550_Web.pdf
  • Collaborative Testing Services - 모바일 디지털 증거 - 2022
    https://cts-forensics.com/reports/22-5550_Web.pdf
  • Collaborative Testing Services - 모바일 디지털 증거 - 2024
    https://cts-forensics.com/reports/24-5550_Web.pdf
  • Cellebrite CTF 2021 라이트업
    https://medium.com/@williamskosasi/cellebrite-ctf-2021-writeup-b73d821a708
  • 1부: 2021 CTF 답변 분석 – Heisenberg의 Android 기기 조사
    https://cellebrite.com/en/part-1-walk-through-of-answers-to-the-2021-ctf-investigating-heisenbergs-android-device/
  • Cellebrite CTF 2021 - Heisenberg의 Android
    https://www.stark4n6.com/2021/10/cellebrite-ctf-2021-heisenbergs-android.html
  • Cellebrite CTF 2022 - Heisenberg의 Android
    https://www.stark4n6.com/2022/06/cellebrite-ctf-2022-heisenbergs-android.html
  • Android Bluetooth 조사
    https://forensafe.com/blogs/Android_Bluetooth.html
  • aLEAPP 플러그인
    https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/bluetoothConnections.py
  • /misc/bootstat/
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/last_boot_time.py
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/factory_reset.py
  • /misc/wifi/qtables.json
  • /misc/wifi/wpa_supplicant.conf
    /misc/wifi/WifiConfigStore.xml
    /misc/apexdata/com.android.wifi/WifiConfigStore.xml
    • Collaborative Testing Services - 모바일 디지털 증거 - 2015
      https://cts-forensics.com/reports/35550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2016
      https://cts-forensics.com/reports/36550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2017
      https://cts-forensics.com/reports/37550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2019
      https://cts-forensics.com/reports/19-5550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2020
      https://cts-forensics.com/reports/20-5550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2021
      https://cts-forensics.com/reports/21-5550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2022
      https://cts-forensics.com/reports/22-5550_Web.pdf
    • Cellebrite 2020 가을 CTF - 1부 - Tony Mederos
      https://starwarsfan2099.github.io/2020/11/02/cellebirte-ctf-tony.html
    • Google의 Wear OS 시작하기
      https://thebinaryhick.blog/2021/01/13/clockin-in-with-googles-wear-os/
    • Learning Android Forensics - 제2판
      https://www.packtpub.com/product/learning-android-forensics-second-edition/9781789131017
    • 모바일 포렌식 조사: 증거 수집, 분석 및 제시 가이드 - 제2판
      https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
    • 포렌식 분석을 위한 Android WiFiConfigStore.xml 해부
      https://blog.digital-forensics.it/2024/02/dissecting-android-wificonfigstorexml.html
    • Android Wi-Fi 정보 조사
      https://forensafe.com/blogs/Android_wifi_Information.html
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/wifiConfigstore2.py
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/wifiProfiles.py
  • /misc/wifi/softap.conf
    /misc/apexdata/com.android.wifi/WifiConfigStoreSoftAp.xml
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/wifiHotspot.py
    • Collaborative Testing Services - 모바일 디지털 증거 - 2018
      https://cts-forensics.com/reports/38550_Web.pdf
    • Let's solve challenges - Cellebrite 2022 CTF 라이트업
      https://www.dfirblog.com/cellebrite-2022-ctf-writeup/
    • Cellebrite CTF 2022 - Heisenberg의 Android
      https://www.stark4n6.com/2022/06/cellebrite-ctf-2022-heisenbergs-android.html
    • Let's solve challenges - Cellebrite 2022 CTF 라이트업
      https://www.dfirblog.com/cellebrite-2022-ctf-writeup/
    • 모바일 포렌식 조사: 증거 수집, 분석 및 제시 가이드 - 제2판
      https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
  • /misc_de/0/apexdata/com.android.permission/runtime-permissions.xml
    • Android의 "위험한" 권한
      https://thebinaryhick.blog/2021/01/26/androids-dangerous-permissions/
    • Android - 역할 및 권한 (Android 10/11)
      https://blog.d204n6.com/2021/01/android-roles-and-permissions-android.html
    • 악성코드에 감염된 Android 휴대폰 검사. 이 Android는 정상이 아닙니다.
      https://thebinaryhick.blog/2022/04/09/examining-a-malware-infected-android-phone-this-android-is-not-alright/
    • Android 14 포렌식 처음 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • 사용자가 XYZ 애플리케이션을 사용한 적이 있나요? 일명 모바일 기기에서의 애플리케이션 실행 흔적
      https://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.html
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/runtimePerms.py
  • /misc_de/0/apexdata/com.android.permission/roles.xml
    • Android - 역할 및 권한 (Android 10/11)
      https://blog.d204n6.com/2021/01/android-roles-and-permissions-android.html
    • Android의 "위험한" 권한
      https://thebinaryhick.blog/2021/01/26/androids-dangerous-permissions/
    • Android 14 포렌식 처음 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • Magnet Virtual Summit 2024 CTF - Android
      https://www.stark4n6.com/2024/03/magnet-virtual-summit-2024-ctf-android.html
    • 2024 Magnet Virtual Summit CTF 워크스루
      https://m-brumbelow.github.io/posts/MVS2024CTF/
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/roles.py
  • Super Sunday Funday 포렌식 챌린지 - 업데이트 4
    https://www.hecfblog.com/2014/09/super-sunday-funday-forensic-challenge_15.html
  • 모바일 포렌식 조사: 증거 수집, 분석 및 제시 가이드 - 제2판
    https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
  • /system/shutdown-checkpoints/
    • Android 12의 종료 체크포인트
      https://www.stark4n6.com/2022/01/shutdown-checkpoints-in-android-12.html
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/shutdown_checkpoints.py
  • /system/users/0.xml
    • Collaborative Testing Services - 모바일 디지털 증거 - 2021
      https://cts-forensics.com/reports/21-5550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2022
      https://cts-forensics.com/reports/22-5550_Web.pdf
    • IoT 생태계의 포렌식 분석
      https://hal.archives-ouvertes.fr/hal-03369836/document
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
  • /system/users/0/app_idle_stats.xml
  • /system/users/0/settings_global.xml
    • 포렌식 조사 중 Android 설정 분석
      https://blog.digital-forensics.it/2024/01/analysis-of-android-settings-during.html
  • /system/users/0/settings_secure.xml
    • Cellebrite CTF 2021 - Heisenberg의 Android
      https://www.stark4n6.com/2021/10/cellebrite-ctf-2021-heisenbergs-android.html
    • 1부: 2021 CTF 답안 해설 – Heisenberg의 Android 기기 조사
      https://cellebrite.com/en/part-1-walk-through-of-answers-to-the-2021-ctf-investigating-heisenbergs-android-device/
    • 악성코드에 감염된 Android 휴대폰 검사. 이 Android는 정상이 아닙니다.
      https://thebinaryhick.blog/2022/04/09/examining-a-malware-infected-android-phone-this-android-is-not-alright/
    • 포렌식 조사 중 Android 설정 분석
      https://blog.digital-forensics.it/2024/01/analysis-of-android-settings-during.html
    • Magnet User Summit 2023 CTF - Android (1부)
      https://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android.html
    • Android 시스템 아티팩트: 기기 정보 및 사용량의 포렌식 분석
      https://belkasoft.com/android-system-artifacts-device
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/settingsSecure.py
      https://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/notificationHistory.py
  • /system/users/0/settings_ssaid.xml
    • 인스턴트 메신저 포렌식 분석: Signal, Wickr 및 Threema 복호화
      https://www.sciencedirect.com/science/article/pii/S2666281722000166
    • Android Wickr 조사
      https://forensafe.com/blogs/Android_Wickr.html
  • /system/users/0/settings_system.xml
    • Android - 역할 및 권한 (Android 10/11)
      https://blog.d204n6.com/2021/01/android-roles-and-permissions-android.html
    • 포렌식 조사 중 Android 설정 분석
      https://blog.digital-forensics.it/2024/01/analysis-of-android-settings-during.html
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
  • /system/users/service/data/eRR.p
    • DeRR.p: Samsung 기기의 전원 이벤트 조사
      https://thebinaryhick.blog/2024/04/07/__trashed/
    • Wipeout! Android 공장 초기화 탐지
      https://thebinaryhick.blog/2021/08/19/wipeout-detecting-android-factory-resets/
    • 1부: 2021 CTF 답안 해설 – Heisenberg의 Android 기기 조사
      https://cellebrite.com/en/part-1-walk-through-of-answers-to-the-2021-ctf-investigating-heisenbergs-android-device/
    • Android Xiaomi 휴대폰 배터리의 역할에 대한 포렌식 연구에서 휴대폰 배터리의 비교, 진화 및 과제
      https://www.jetir.org/papers/JETIR2408628.pdf
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/errp.py
  • /system/appops.xml
    • Android 12의 개인정보 대시보드 엿보기
      https://thebinaryhick.blog/2022/01/22/snooping-on-android-12s-privacy-dashboard/
    • Wipeout! Android 공장 초기화 탐지
      https://thebinaryhick.blog/2021/08/19/wipeout-detecting-android-factory-resets/
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/appopSetupWiz.py
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/appops.py
    • AI 스피커 생태계를 위한 디지털 포렌식 관행 및 방법론
      https://www.sciencedirect.com/science/article/pii/S1742287619301628
    • Android 내부 구조
      http://newandroidbook.com/Book/2-Excerpt-Data.pdf
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
  • /system/batterystats.bin
    • 영상 애호가: 우리는 당신이 무엇을 보고 있는지 알고 있습니다
      https://par.nsf.gov/servlets/purl/10215810
    • Android 내부 구조
      http://newandroidbook.com/Book/2-Excerpt-Data.pdf
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • Android Xiaomi 휴대폰 배터리의 역할에 대한 포렌식 연구에서 휴대폰 배터리의 비교, 진화 및 과제
      https://www.jetir.org/papers/JETIR2408628.pdf
  • /system/batterystats-checkin.bin
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
  • /system/batterystats-daily.xml
    • 당신이 내딛는 모든 걸음: Android의 애플리케이션 및 네트워크 사용
      https://docplayer.net/90183420-Every-step-you-take-application-and-network-usage-in-android.html
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • 사용자가 XYZ 애플리케이션을 사용한 적이 있는가? 일명 모바일 기기에서의 애플리케이션 실행 흔적
      https://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.html
  • /system/deviceidle.xml
  • /system/locksettings.db
    • Android 시스템 아티팩트: 기기 정보 및 사용량의 포렌식 분석
      https://belkasoft.com/android-system-artifacts-device
    • New Year Challenge CyberTalents CTF 2025|포렌식 Writeup
      https://medium.com/@SIGMA_001/new-year-challenge-cybertalents-ctf-2025-forensics-writeup-dd5c46e126c4
  • /system/netpolicy.xml
    • Cellebrite CTF 2021 - Heisenberg의 Android
      https://www.stark4n6.com/2021/10/cellebrite-ctf-2021-heisenbergs-android.html
    • 1부: 2021 CTF 답안 해설 – Heisenberg의 Android 기기 조사
      https://cellebrite.com/en/part-1-walk-through-of-answers-to-the-2021-ctf-investigating-heisenbergs-android-device/
    • Cellebrite CTF 2021 Writeup
      https://medium.com/@williamskosasi/cellebrite-ctf-2021-writeup-b73d821a708
    • Android 내부 구조
      http://newandroidbook.com/Book/2-Excerpt-Data.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2022
      https://cts-forensics.com/reports/22-5550_Web.pdf
  • /system/notification_policy.xml
    • 1부: 2021 CTF 답안 해설 – Heisenberg의 Android 기기 조사
      https://cellebrite.com/en/part-1-walk-through-of-answers-to-the-2021-ctf-investigating-heisenbergs-android-device/
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • Android 알림 기록의 포렌식 분석
      https://ieeexplore.ieee.org/document/10679344
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/notificationHistory.py
  • /system/PkgPredictions.db
    • 사용자가 XYZ 애플리케이션을 사용한 적이 있는가? 일명 모바일 기기에서의 애플리케이션 실행 흔적
      https://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.html
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/pkgPredictions.py
  • /system/SemWifiApContentProvider
    • 2부: CTF 2022 Write Up – Heisenberg의 Android
      https://cellebrite.com/en/part-2-ctf-2022-write-up-heisenbergs-android/
  • /system/SimCard.dat
    • Collaborative Testing Services - 모바일 디지털 증거 - 2018
      https://cts-forensics.com/reports/38550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2019
      https://cts-forensics.com/reports/19-5550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2020
      https://cts-forensics.com/reports/20-5550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2021
      https://cts-forensics.com/reports/21-5550_Web.pdf
    • 모바일 포렌식 조사: 증거 수집, 분석 및 제시 가이드 - 제2판
      https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
  • /system/WifiConfigStore.db
  • /system/WifiHistory.db
  • /system/wifigeofence.db
    • Collaborative Testing Services - 모바일 디지털 증거 - 2020
      https://cts-forensics.com/reports/20-5550_Web.pdf
  • /system/packages.xml
    • Android - 역할 및 권한 (Android 10/11)
      https://blog.d204n6.com/2021/01/android-roles-and-permissions-android.html
    • Android 시스템 아티팩트: 애플리케이션 사용량의 포렌식 분석
      https://belkasoft.com/android-system-artifacts-forensic-analysis-of-application-usage
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • 사용자가 XYZ 애플리케이션을 사용한 적이 있는가? 일명 모바일 기기에서의 애플리케이션 실행 흔적
      https://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.html
    • 모바일 기기 조사를 위한 애플리케이션 아티팩트 발견 방법
      https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/
    • 모바일 포렌식: 미발견의 발견
      https://www.magnetforensics.com/blog/mobile-forensics-discovering-the-undiscovered/
    • /data/system/ 디렉터리의 일부 아티팩트
      http://freeandroidforensics.blogspot.com/2014/11/some-artifacts-in-datasystem-directory.html
    • Android 내부 구조
      http://newandroidbook.com/Book/2-Excerpt-Data.pdf
    • 모바일 포렌식 조사: 증거 수집, 분석 및 제시 가이드 - 제2판
      https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/packageInfo.py
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/permissions.py
  • /system/packages.list
    • Android - 역할 및 권한 (Android 10/11)
      https://blog.d204n6.com/2021/01/android-roles-and-permissions-android.html
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • 사용자가 XYZ 애플리케이션을 사용한 적이 있는가? 일명 모바일 기기에서의 애플리케이션 실행 흔적
      https://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.html
    • 모바일 기기 조사를 위한 애플리케이션 아티팩트 발견 방법
      https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/
    • Android 내부 구조
      http://newandroidbook.com/Book/2-Excerpt-Data.pdf
    • Android 포렌식 학습 - 제2판
      https://www.packtpub.com/product/learning-android-forensics-second-edition/9781789131017
    • 모바일 포렌식 조사: 증거 수집, 분석 및 제시 가이드 - 제2판
      https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
    • Android 포렌식 학습 - 제2판
      https://www.packtpub.com/product/learning-android-forensics-second-edition/9781789131017
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/packageGplinks.py
  • /system_ce/0/accounts_ce.db
    • Collaborative Testing Services - 모바일 디지털 증거 - 2020
      https://cts-forensics.com/reports/20-5550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2023
      https://cts-forensics.com/reports/23-5550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2024
      https://cts-forensics.com/reports/24-5550_Web.pdf
    • 1부: 2021 CTF 답안 해설 – Heisenberg의 Android 기기 조사
      https://cellebrite.com/en/part-1-walk-through-of-answers-to-the-2021-ctf-investigating-heisenbergs-android-device/
    • Android - 기기 마이그레이션 추적
      https://blog.d204n6.com/2021/06/android-tracking-device-migration.html
    • Magnet User Summit 2023 CTF - Android (1부)
      https://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android.html
    • Magnet Virtual Summit 2024 CTF - Android
      https://www.stark4n6.com/2024/03/magnet-virtual-summit-2024-ctf-android.html
    • Android 시스템 아티팩트: 애플리케이션 사용량의 포렌식 분석
      https://belkasoft.com/android-system-artifacts-forensic-analysis-of-application-usage
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • Android 계정 조사
      https://forensafe.com/blogs/Android_Accounts.html
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/accounts_ce.py
  • /system_ce/notification_history/
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • Android 알림 기록의 포렌식 분석
      https://ieeexplore.ieee.org/document/10679344
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/notificationHistory.py
  • /system_ce/recent_images/
    • 모바일 포렌식: 미발견의 발견
      https://www.magnetforensics.com/blog/mobile-forensics-discovering-the-undiscovered/
    • 모바일 기기 조사를 위한 애플리케이션 아티팩트 발견 방법
      https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • Android 최근 작업 XML 파서
      https://abrignoni.blogspot.com/2019/02/android-recent-tasks-xml-parser.html
    • 당신이 내딛는 모든 걸음: Android의 애플리케이션 및 네트워크 사용
      https://docplayer.net/90183420-Every-step-you-take-application-and-network-usage-in-android.html
    • AI 스피커 생태계를 위한 디지털 포렌식 관행 및 방법론
      https://www.sciencedirect.com/science/article/pii/S1742287619301628
    • 모바일 포렌식 조사: 증거 수집, 분석 및 제시 가이드 - 제2판
      https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/recentactivity.py
  • /system_ce/recent_tasks/
    • 모바일 포렌식: 미발견의 발견
      https://www.magnetforensics.com/blog/mobile-forensics-discovering-the-undiscovered/
    • 모바일 기기 조사를 위한 애플리케이션 아티팩트 발견 방법
      https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/
    • Android 최근 작업 XML 파서
      https://abrignoni.blogspot.com/2019/02/android-recent-tasks-xml-parser.html
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • AI 스피커 생태계를 위한 디지털 포렌식 관행 및 방법론
      https://www.sciencedirect.com/science/article/pii/S1742287619301628
    • 확증. 그것뿐입니다.
      https://thebinaryhick.blog/2021/06/17/corroboration-that-is-all/
    • 당신이 내딛는 모든 걸음: Android의 애플리케이션 및 네트워크 사용
      https://docplayer.net/90183420-Every-step-you-take-application-and-network-usage-in-android.html
    • 모바일 포렌식 조사: 증거 수집, 분석 및 제시 가이드 - 제2판
      https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
    • Magnet Weekly CTF Write-up
      https://www.cloud-response.com/2020/10/write-up-magnet-weekly-ctf.html
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/recentactivity.py
  • /system_ce/shortcuts/
  • /system_ce/snapshots/
    • 확증. 그것뿐입니다.
      https://thebinaryhick.blog/2021/06/17/corroboration-that-is-all/
    • Android 최근 작업 XML 파서
      https://abrignoni.blogspot.com/2019/02/android-recent-tasks-xml-parser.html
    • 모바일 포렌식: 미발견의 발견
      https://www.magnetforensics.com/blog/mobile-forensics-discovering-the-undiscovered/
    • 모바일 기기 조사를 위한 애플리케이션 아티팩트 발견 방법
      https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • Magnet Virtual Summit 2022 CTF - Android
      https://www.stark4n6.com/2022/05/magnet-virtual-summit-2022-ctf-android.html
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/recentactivity.py
  • /system_ce/usagestats/
    • Android Usagestats XML 파서
      https://abrignoni.blogspot.com/2019/02/android-usagestats-xml-parser.html
    • UsageStats를 통한 Android 운영 체제 버전 식별
      https://www.sans.org/white-papers/40265/
    • Android 10(Q)의 Usagestats
      http://www.swiftforensics.com/2020/01/usagestats-on-android-10-q.html
    • 모바일 포렌식: 미발견의 발견
      https://www.magnetforensics.com/blog/mobile-forensics-discovering-the-undiscovered/
    • 모바일 기기 조사를 위한 애플리케이션 아티팩트 발견 방법
      https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/
    • /data/system/ 디렉터리의 일부 아티팩트
      http://freeandroidforensics.blogspot.com/2014/11/some-artifacts-in-datasystem-directory.html
    • 운전자 주의 산만을 나타내는 Android Dumpsys 분석
      https://ccdcoe.org/uploads/2021/03/Android-Dumpsys-Analysis-to-Indicate-Driver-Distraction.pdf
    • 당신이 내딛는 모든 걸음: Android의 애플리케이션 및 네트워크 사용
      https://docplayer.net/90183420-Every-step-you-take-application-and-network-usage-in-android.html
    • 삭제된 애플리케이션의 흔적 추적
      https://www.youtube.com/watch?v=4LcQm4ErXpA
      https://docplayer.net/148670626-Tracking-traces-of-deleted-applications-christopher-vance-alexis-brignoni.html
    • build.props 파일이 없는 Android 버전
      https://abrignoni.blogspot.com/2021/04/android-version-without-buildprops-file.html
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • Android 시스템 아티팩트: 애플리케이션 사용량의 포렌식 분석
      https://belkasoft.com/android-system-artifacts-forensic-analysis-of-application-usage
    • Magnet User Summit 2023 CTF - Android (1부)
      https://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android.html
    • Android 내부 구조
      http://newandroidbook.com/Book/2-Excerpt-Data.pdf
    • 모바일 포렌식 조사: 증거 수집, 분석 및 제시 가이드 - 제2판
      https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/usagestats.py
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/usagestatsVersion.py
  • /system_de/0/accounts_de.db
    • Android - 기기 마이그레이션 추적
      https://blog.d204n6.com/2021/06/android-tracking-device-migration.html
    • Google Wear OS와 함께 출근 체크인
      https://thebinaryhick.blog/2021/01/13/clockin-in-with-googles-wear-os/
    • Android 시스템 아티팩트: 애플리케이션 사용량의 포렌식 분석
      https://belkasoft.com/android-system-artifacts-forensic-analysis-of-application-usage
    • Android 계정 조사
      https://forensafe.com/blogs/Android_Accounts.html
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • Magnet User Summit 2023 CTF - Android (1부)
      https://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android.html
    • Magnet Virtual Summit 2024 CTF - Android
      https://www.stark4n6.com/2024/03/magnet-virtual-summit-2024-ctf-android.html
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/accounts_de.py
  • Cellebrite의 CTF 2023 요약: Russell의 Android 기기 답안
    https://cellebrite.com/en/cellebrites-ctf-2023-recap-answers-for-russells-android-device/
  • Hex Diving — 숨겨진 포렌식 아티팩트를 찾아내는 쉬운 방법
    https://cellebrite.com/en/hex-diving-the-easy-way-to-uncover-hidden-forensic-artifacts/
  • Android 모바일 아티팩트: 범죄 수사에서 디지털 증거의 보물창고 
    https://www.irjet.net/archives/V8/i8/IRJET-V8I885.pdf
  • Magnet User Summit 2023 CTF - Android (1부)
    https://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android.html
  • Magnet Virtual Summit 2024 CTF - Android
    https://www.stark4n6.com/2024/03/magnet-virtual-summit-2024-ctf-android.html
  • 2024 Magnet Virtual Summit CTF 워크스루
    https://m-brumbelow.github.io/posts/MVS2024CTF/
  • 모바일 포렌식 조사: 증거 수집, 분석 및 제시를 위한 안내서 - 제2판
    https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
  • aLEAPP 플러그인
    https://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/siminfo.py
  • /user_de/0/com.android.settings/databases/applist.db
  • /user_de/0/com.samsung.accessibility/shared_prefs/accessibility_prefs.xml
  • /user_de/0/com.sec.imsservice/shared_prefs/capdiscovery_0.xml
  • Collaborative Testing Services - 모바일 디지털 증거 - 2017
    https://cts-forensics.com/reports/37550_Web.pdf
  • Google Drive 클라이언트의 잔여 데이터에 대한 모바일 포렌식 조사 분석을 위한 제안 방법
    https://jit.ndhu.edu.tw/article/download/1795/1801
  • 모바일 포렌식 조사: 증거 수집, 분석 및 제시를 위한 안내서 - 제2판
    https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
  • aLEAPP 플러그인
    https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/DocList.py

  • https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/FilesByGoogle.py
  • Turbo Speed: Google의 Device Health Services 파싱
    https://dfir.pubpub.org/pub/4can3p40/release/1
  • aLEAPP 플러그인
    https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/Turbo_Battery.py
  • /data/com.google.android.apps.turbo/shared_prefs/app_usage_stats.xml
    • Turbo 3부 - Device Health Services 앱 사용량
      https://www.stark4n6.com/2021/06/turbo-application-usage.html
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • Android 시스템 아티팩트: 기기 정보 및 사용량의 포렌식 분석
      https://belkasoft.com/android-system-artifacts-device
    • Turbo Speed: Google의 Device Health Services 파싱
      https://dfir.pubpub.org/pub/4can3p40/release/1
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/Turbo_AppUsage.py

    https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/setupWizardinfo.py
  • /data/com.google.android.settings.intelligence/shared_prefs/suggestions.xml
    • Wipeout! Android 공장 초기화 탐지
      https://thebinaryhick.blog/2021/08/19/wipeout-detecting-android-factory-resets/
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/suggestions.py

    https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
  • /data/com.google.android.gms/databases/gass.db
    • 사용자가 XYZ 애플리케이션을 사용해 본 적이 있는가? 일명 모바일 기기에서의 애플리케이션 실행 흔적
      https://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.html
    • Android 14 포렌식 첫인상
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • Collaborative Testing Services - 모바일 디지털 증거 - 2021
      https://cts-forensics.com/reports/21-5550_Web.pdf
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/installedappsGass.py
  • /data/com.google.android.gms/databases/gms.notifications.db
  • /data/com.google.android.gms/databases/google_account_history.db
    • Android 14 포렌식 첫인상
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
  • /data/com.google.android.gms/databases/google_app_measurement.db
    • Android 애플리케이션 포렌식
      https://dione.lib.unipi.gr/xmlui/bitstream/handle/unipi/11306/Kitsaki_mte1618.pdf?isAllowed=y&sequence=1
    • Android용 Bumble 데이팅 앱의 포렌식 분석
      https://www.mdpi.com/2673-6756/2/1/16/htm
  • /data/com.google.android.gms/databases/herrevad
    • HERREVAD 데이터베이스 지리 위치 아티팩트
      http://trewmte.blogspot.com/2017/02/herrevad-databases-geo-location.html
    • 업데이트 - HERREVAD 데이터베이스 지리 위치 아티팩트
      http://trewmte.blogspot.com/2018/07/update-herrevad-databases-geo-location.html
    • 업데이트2 - HERREVAD 데이터베이스 지리 위치 아티팩트
      http://trewmte.blogspot.com/2019/05/update2-herrevad-databases-geo-location.html
    • 업데이트3 - HERREVAD 데이터베이스 지리 위치 아티팩트
      http://trewmte.blogspot.com/2019/12/update3-herrevad-databases-geo-location.html
    • Collaborative Testing Services - 모바일 디지털 증거 - 2019
      https://cts-forensics.com/reports/19-5550_Web.pdf
  • /data/com.google.android.gms/databases/icing_contacts.db
    • 화면이 깨진 Android 휴대폰에서 데이터 복구 - 대안
      https://hackcorrelation.blogspot.com/2016/10/recovering-data-from-broken-screen.html
    • Android 14 포렌식 첫인상
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
  • /data/com.google.android.gms/databases/icing_mmssms.db
    • Cellebrite-icing_mmssms.db-Parser
      https://github.com/python-for-mobile-forensics/Cellebrite-icing_mmssms.db-Parser/blob/master/README.md
    • Android 메시징 포렌식 – SMS/MMS와 그 너머
      https://www.magnetforensics.com/blog/android-messaging-forensics-sms-mms-and-beyond/
  • /data/data/com.google.android.gms/databases/MdpSimBasedDatabase
    • Hex Diving — 숨겨진 포렌식 아티팩트를 발견하는 쉬운 방법
      https://cellebrite.com/en/hex-diving-the-easy-way-to-uncover-hidden-forensic-artifacts/
    • Android 14 포렌식 첫인상
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
  • /data/com.google.android.gms/databases/NetworkUsage.db
    • 단서에 맥락 제공: Android 기기의 위치 데이터 복구와 신뢰성
      https://stars.library.ucf.edu/cgi/viewcontent.cgi?referer=&httpsredir=1&article=2353&context=etd
  • /data/com.google.android.gms/databases/ns.db
  • /data/com.google.android.gms/databases/reminders.db
    • 스마트 스피커 포렌식
      https://core.ac.uk/download/pdf/230544843.pdf
  • /data/com.google.android.gms/files/fcm_queued_messages.ldb
    • Android의 FCM 대기 메시지
      https://www.cclsolutionsgroup.com/post/fcm-queued-messages-on-android
    • Android Firebase Cloud Messaging
      https://forensafe.com/blogs/AndroidFCM.html
    • 방황하는 Android가 모두 길을 잃는 것은 아니다: Android의 Find My Device 네트워크 살펴보기
      https://thebinaryhick.blog/2024/08/23/not-all-androids-who-wonder-are-lost-a-look-at-androids-find-my-device-network/
    • Android 14 포렌식 첫인상
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/FCMQueuedMessagesDump.py
  • /data/com.google.android.gms/shared_prefs/batterystats.xml
    • 당신이 내딛는 모든 걸음: Android의 앱 및 네트워크 사용량
      https://docplayer.net/90183420-Every-step-you-take-application-and-network-usage-in-android.html
    • 모바일 기기 조사에서 애플리케이션 아티팩트를 찾아내는 방법
      https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/
  • /data/com.google.android.gms/shared_prefs/adid_settings.xml
  • /data/com.google.android.gms/shared_prefs/BackupAccount.xml
    • Android 계정 조사
      https://forensafe.com/blogs/Android_Accounts.html
    • Collaborative Testing Services - 모바일 디지털 증거 - 2021
      https://cts-forensics.com/reports/21-5550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2022
      https://cts-forensics.com/reports/22-5550_Web.pdf
  • /data/com.google.android.gms/shared_prefs/Checkin.xml
    • Collaborative Testing Services - 모바일 디지털 증거 - 2018
      https://cts-forensics.com/reports/38550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2019
      https://cts-forensics.com/reports/19-5550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2020
      https://cts-forensics.com/reports/20-5550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2021
      https://cts-forensics.com/reports/21-5550_Web.pdf
    • Hex Diving — 숨겨진 포렌식 아티팩트를 발견하는 쉬운 방법
      https://cellebrite.com/en/hex-diving-the-easy-way-to-uncover-hidden-forensic-artifacts/
    • Cellebrite CTF 2021 라이트업
      https://medium.com/@williamskosasi/cellebrite-ctf-2021-writeup-b73d821a708
    • Cellebrite CTF 2022 - 하이젠베르크의 Android
      https://www.stark4n6.com/2022/06/cellebrite-ctf-2022-heisenbergs-android.html
    • Android의 마지막 SIM 조사
      https://forensafe.com/blogs/Android_Last_SIM.html
    • Android 14 포렌식 첫인상
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
  • /data/com.google.android.gms/shared_prefs/nearbysharing:service:state.xml
    • Nearby Share – Android용 AirDrop (원치 않는 Richard 사진의 귀환)
      https://thebinaryhick.blog/2020/08/22/nearby-share-airdrop-for-android-return-of-the-unsolicited-richard-photograph/
  • /data/com.google.android.gms/shared_prefs/ULR_USER_PREFS.xml
    • The Green Look Back. Android의 기기 내 위치 기록
      https://thebinaryhick.blog/2024/06/28/the-green-look-back-androids-on-device-location-history/
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/ulrUserprefs.py
  • 앱이 앱이 아닌 때는? Android에서 WebAPK 조사하기
    https://www.cclsolutionsgroup.com/post/when-is-an-app-not-an-app-investigating-webapks-on-android
  • Cisco WebEx 데스크톱 클라이언트, 웹 및 Android 스마트폰 애플리케이션의 포렌식 조사
    https://link.springer.com/article/10.1007/s12243-022-00919-6
  • /data/com.android.vending/databases/library.db
    • 모바일 포렌식: 미발견의 발견
      https://www.magnetforensics.com/blog/mobile-forensics-discovering-the-undiscovered/
    • Android 시스템의 애플리케이션 설치 로그 분석
      https://dl.acm.org/doi/10.1145/3297280.3297489
    • CTF Cellebrite CTF 2020: Rene Gade
      https://ciofecaforensics.com/2020/10/31/cellebrite-ctf-rene/
    • 삭제된 애플리케이션의 흔적 추적
      https://www.youtube.com/watch?v=4LcQm4ErXpA
      https://docplayer.net/148670626-Tracking-traces-of-deleted-applications-christopher-vance-alexis-brignoni.html
    • 당신이 내딛는 모든 걸음: Android의 애플리케이션 및 네트워크 사용
      https://docplayer.net/90183420-Every-step-you-take-application-and-network-usage-in-android.html
    • 사용자가 XYZ 애플리케이션을 사용한 적이 있는가? 일명 모바일 기기에서의 애플리케이션 실행 흔적
      https://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.html
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • 모바일 기기 조사를 위한 애플리케이션 아티팩트 발견 방법
      https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/installedappsLibrary.py
  • /data/com.android.vending/databases/localappstate.db
    • Android 시스템의 애플리케이션 설치 로그 분석
      https://dl.acm.org/doi/10.1145/3297280.3297489
    • 삭제된 애플리케이션의 흔적 추적
      https://www.youtube.com/watch?v=4LcQm4ErXpA
      https://docplayer.net/148670626-Tracking-traces-of-deleted-applications-christopher-vance-alexis-brignoni.html
    • 2부: CTF 2022 Write Up – Heisenberg의 Android
      https://cellebrite.com/en/part-2-ctf-2022-write-up-heisenbergs-android/
    • Collaborative Testing Services - 모바일 디지털 증거 - 2015
      https://cts-forensics.com/reports/35550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2016
      https://cts-forensics.com/reports/36550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2017
      https://cts-forensics.com/reports/37550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2018
      https://cts-forensics.com/reports/38550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2019
      https://cts-forensics.com/reports/19-5550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2020
      https://cts-forensics.com/reports/20-5550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2021
      https://cts-forensics.com/reports/21-5550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2022
      https://cts-forensics.com/reports/22-5550_Web.pdf
    • 사용자가 XYZ 애플리케이션을 사용한 적이 있는가? 일명 모바일 기기에서의 애플리케이션 실행 흔적
      https://blog.digital-forensics.it/2023/12/has-user-ever-used-xyz-application-aka.html
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • Android 설치 애플리케이션 조사
      https://forensafe.com/blogs/Android_InstalledApps.html
    • 모바일 포렌식 조사: 증거 수집, 분석 및 제시를 위한 가이드 - 제2판
      https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/installedappsVending.py
  • /data/com.android.vending/databases/package_verification.db
    • 삭제된 애플리케이션의 흔적 추적
      https://www.youtube.com/watch?v=4LcQm4ErXpA
      https://docplayer.net/148670626-Tracking-traces-of-deleted-applications-christopher-vance-alexis-brignoni.html
  • /data/com.android.vending/databases/suggestions.db
    • Collaborative Testing Services - 모바일 디지털 증거 - 2015
      https://cts-forensics.com/reports/35550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2016
      https://cts-forensics.com/reports/36550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2017
      https://cts-forensics.com/reports/37550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2018
      https://cts-forensics.com/reports/38550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2019
      https://cts-forensics.com/reports/19-5550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2020
      https://cts-forensics.com/reports/20-5550_Web.pdf
    • Android 14 포렌식 첫 살펴보기
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • Android 시스템 아티팩트: 애플리케이션 사용의 포렌식 분석
      https://belkasoft.com/android-system-artifacts-forensic-analysis-of-application-usage
    • Magnet User Summit 2023 CTF - Android (2부)
      https://www.stark4n6.com/2023/05/magnet-user-summit-2023-ctf-android_5.html
    • Magnet Virtual Summit 2024 CTF - Android
      https://www.stark4n6.com/2024/03/magnet-virtual-summit-2024-ctf-android.html
    • Android Playstore 검색 기록 조사
      https://forensafe.com/blogs/Android_PlayStoreSearch.html
    • 모바일 포렌식 조사: 증거 수집, 분석 및 제시를 위한 가이드 - 제2판
      https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/
    • aLEAPP 플러그인
      https://github.com/abrignoni/ALEAPP/blob/main/scripts/artifacts/googlePlaySearches.py
  • /data/com.android.vending/databases/verify_apps.db
    • Cisco WebEx 데스크톱 클라이언트, 웹 및 Android 스마트폰 애플리케이션의 포렌식 조사
      https://link.springer.com/article/10.1007/s12243-022-00919-6

    https://www.irjet.net/archives/V8/i8/IRJET-V8I885.pdf
  • 통화 기록 쿼리
    https://github.com/kacos2000/Queries/blob/master/calllog_db.sql
  • Android 14 포렌식 첫인상
    https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
  • Android 통화 기록 조사
    https://forensafe.com/blogs/Android_Call_logs.html
  • Android SMS 조사
    https://forensafe.com/blogs/AndroidSMS.html
  • 모바일 기기 조사를 위한 애플리케이션 아티팩트 발견 방법
    https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/
  • Road Trippin’ – 삼성 휴대폰의 블루투스 통화 경로 탐색
    https://thebinaryhick.blog/2024/04/16/road-trippin-exploring-bluetooth-call-routes-on-samsung-phones/
  • Android 포렌식 학습 - 제2판
    https://www.packtpub.com/product/learning-android-forensics-second-edition/9781789131017
  • 실용 모바일 포렌식 - 제4판
    https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
  • aLEAPP 플러그인
    https://github.com/abrignoni/ALEAPP/blob/master/scripts/artifacts/calllog.py
  • /data/com.android.providers.contacts/databases/contacts2.db
    • 오픈소스 모바일 기기 포렌식
      https://smarterforensics.com/wp-content/uploads/2014/06/OpenSourceMobileForensics.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2016
      https://cts-forensics.com/reports/36550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2017
      https://cts-forensics.com/reports/37550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2018
      https://cts-forensics.com/reports/38550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2019
      https://cts-forensics.com/reports/19-5550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2020
      https://cts-forensics.com/reports/20-5550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2021
      https://cts-forensics.com/reports/21-5550_Web.pdf
    • Collaborative Testing Services - 모바일 디지털 증거 - 2022
      https://cts-forensics.com/reports/22-5550_Web.pdf
    • Android 모바일 아티팩트: 범죄 수사에 있어 디지털 증거의 보고 
      https://www.irjet.net/archives/V8/i8/IRJET-V8I885.pdf
    • 연락처 쿼리
      https://github.com/kacos2000/Queries/blob/master/contacts2.sql
    • 연락처 통화 쿼리
      https://github.com/kacos2000/Queries/blob/master/contacts2calls.sql
    • Android 포렌식 학습 - 제2판
      https://www.packtpub.com/product/learning-android-forensics-second-edition/9781789131017
    • Android 14 포렌식 첫인상
      https://blog.digital-forensics.it/2024/01/a-first-look-at-android-14-forensics.html
    • Android 연락처 조사
      https://forensafe.com/blogs/Android_Contacts.html
    • 모바일 기기 조사를 위한 애플리케이션 아티팩트 발견 방법
      https://www.magnetforensics.com/blog/how-to-uncover-application-artifacts-for-mobile-device-investigations/
    • 실용 모바일 포렌식 - 제4판
      https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
    • 모바일 포렌식 조사: 증거 수집, 분석 및 제시 가이드 - 제2판
      https://www.oreilly.com/library/view/mobile-forensic-investigations/9781260135107/

    • Read more