A Practical Survey of Data Carving from Non-Functional Android Phones Using Chip-Off Technique

Mobile devices have become ubiquitous in modern life and are increasingly used for communication, entertainment, and personal data storage. Due to their prevalence, they have become essential sources of evidence in criminal investigations. Android-based mobile phones account for almost two-thirds of the market share, making data extraction from these devices necessary in criminal investigations. However, data extraction methods become limited when the phones are non-functional, which is often the case when phones are seized during investigations. This paper presents a survey of forensic data carving techniques from non-functional Android mobile devices. The study aims to evaluate a chip-off data carving technique for extracting and analyzing data from non-functional devices using a four-step methodology, including disassembly, chip-off, image acquisition, and data carving. The methodology highlights the critical steps and precautions that must be followed to ensure proper data carving. Additionally, the study compares various tools used for data carving. The study highlights the challenges involved in the forensic analysis of mobile devices, such as device encryption, and provides recommendations for future research in this area. Overall, this study contributes to the growing body of knowledge on digital forensics and provides a valuable resource for investigators working with Android mobile devices in criminal investigations.