Module 1

Before the course

1. 1.(W00) Course Instructions
2. 2.(W46M01) Why Android forensics?
3. 3.(W46M02) Android versions

Module 2

Module 1

1. 1.(W46M03) Android Architecture
2. 2.(W46M04) Android Boot Process
3. 3.(W46M05) Partitioning in Android Systems
4. 4.(W46M06) Android Incident Response
5. 5.(W46M07) Terminology relevant to Android Forensics
6. 6.(W46M08) Introduction to Unrooted Device Analysis
7. 7.(W46M09) Volatile Data Acquisition
8. 8.(W46M10) Logical Acquisition
9. 9.(W46M11) File System Acquisition - adb dumpsys - Part 1
10. 10.(W46M12) File System Acquisition - adb dumpsys - Part 2
11. 11.(W46M13) File System Acquisition - Android Backup

Module 3

Module 2

1. 1.(W46M14) Understanding Stock ROM and Custom ROM
2. 2.(W46M15) Android Rooting Process
3. 3.(W46M16) Introduction to Rooted Device Analysis
4. 4.(W46M17) File System Acquisition - Part 1
5. 5.(W46M18) File System Acquisition - Part 2
6. 6.(W46M19) File System Acquisition - Part 3
7. 7.(W46M20) Physical Acquisition
8. 8.(W46M21) Application Data Analysis
9. 9.(W46M22) Recap

Module 4

Module 3

1. 1.(W46M23) Free and Commercial Tools
2. 2.(W46M24) Components of an Android Application
3. 3.(W46M25) Itroduction to Android Malware Analysis
4. 4.(W46M26) Legitimate App Analysis - Part 1 - Static Analysis
5. 5.(W46M27) Legitimate App Analysis - Part 2 - Dynamic Analysis
6. 6.(W46M28) Disclaimer
7. 7.(W46M29) Analysis of Malware Sample 1
8. 8.(W46M30) Analysis of Malware Sample 2
9. 9.Practice: (W46Q03T11)
10. 10.Practice: (W46Q03T19)

Module 5

Module 4 - July 14th

1. 1.(W46M00) Refresher - crossword puzzle
2. 2.(W46W31) Hidden Vault Applications
3. 3.(W46W32) Virtual Device Forensics
4. 4.(W46W33) Android Devices with Multiple Users
5. 5.(W46W34) Case Study - Putting it all Together
6. 6.(W46W35) References and resources
7. 7.Practice: (W46Q04T14)

Module 6

Final Exam

1. 1.Practice: (W46Q05T12)