Professional Documents
Culture Documents
Digital Evidence
from Android-based Smartwatch
Jae-ki Kim
Jack2
jack2@korea.ac.kr
jack2yo@gmail.com
http://jack2.codebreaking.org
Overview
1. Target Device
3. Digital Evidence
4. Conclusion
forensicinsight.org
Page 2
Target Device
forensicinsight.org
Page 3
Target Device
forensicinsight.org
Page 4
Target Device
190 AF
forensicinsight.org
OS
Page 5
forensicinsight.org
Page 6
forensicinsight.org
Page 7
forensicinsight.org
Page 8
forensicinsight.org
Page 9
forensicinsight.org
Page 10
forensicinsight.org
Page 11
Previous work
Install Samsung USB Drivers
Settings > Gear Info > Tap Software Version 10 times
Enable USB Debugging on the Galaxy Gear
Plug in the Galaxy Gear via USB
forensicinsight.org
Page 12
Previous work
Install Samsung USB Drivers
Settings > Gear Info > Tap Software Version 10 times
Enable USB Debugging on the Galaxy Gear
Plug in the Galaxy Gear via USB
forensicinsight.org
Page 13
Limitations
Only 4GB Built-In Memory
No Network Interface (Wi-Fi, 3G/4G)
forensicinsight.org
Page 15
Limitations
Only 4GB Built-In Memory
No Network Interface (Wi-Fi, 3G/4G)
forensicinsight.org
Page 16
Digital Evidence
forensicinsight.org
Page 17
Digital Evidence
Use FTK Imager
Very large amounts of data -_- ;;
forensicinsight.org
Page 18
Digital Evidence
bt_config.xml
Path
/data/misc/bluedroid/
Info
Specific information synchronized smartphone (Device name , Bluetooth address )
forensicinsight.org
Page 19
Digital Evidence
NotificationSync.db
Path
/data/data/com.samsung.appcessory.NotiConsumerService/databases/
Info
SMS/MMS, Hangout Message, Gmail information synchronized smartphone
Page 20
Digital Evidence
watch.xml
Path
/data/data/com.samsung.accessory.FindMyPhone/ConsumerService/shared_prefs/
Info
Find a synchronized smartphone
forensicinsight.org
Page 21
Digital Evidence
WeatherClock
Path
/data/data/com.sec.android.widgetapp.ap.hero.accuweather.consumer.widget/databases/
Info
Check the local weather used Synchronized smartphone
Page 22
Conclusion
Next Target Issue
forensicinsight.org
Page 23
Conclusion
1.0 GHz
v4.0 LE
, , , /
200 AF
forensicinsight.org
Page 24
Reference
http://theunlockr.com/2013/11/20/root-samsung-galaxy-gear-video/
https://www.facebook.com/groups/212473532271572/permalink/247282375457354/
forensicinsight.org
Page 25
forensicinsight.org
Page 26