NEW350+ rooms now have a live terminal, so you can learn by typing the commands, right in your browser.Learn in a live terminal. 350+ rooms.Try a lab♥ Codelivly is 100% free, no paywall. If it helped you, chip in to keep it running.100% free. Help keep it so.Support us
[>_] ROOM · Forensics
Android Artifact Analysis
Master Android artifact analysis. Learn to extract and parse SMS, call logs, app data, and location history from Android file systems and SQLite databases.
Room tasks
1What Are Android Artifacts and Why Do They Matter
2Android File System & Key Directories
3SQLite Databases: SMS, Call Logs & App Data
4Analyzing Android Backups (ADB)
5Guided Lab: Extracting and Parsing Android Artifacts
Frequently Asked Questions
What is Android forensics?
Android forensics is the acquisition and analysis of data from Android devices, including messages, call logs, app databases and location history. It relies heavily on parsing SQLite files and system logs.
Where does Android store SMS and call logs?
They are stored in SQLite databases inside app data directories, such as the telephony provider's mmssms.db and contacts databases. Examiners extract and query these to rebuild communications.
Can I learn Android forensics without a device?
Yes. This free Codelivly room provides guided artifacts and exercises, so you can practise parsing SMS, call logs and app data without needing a physical phone or paid tools.