Joseph McCray decided to answer the question How to Perform a Physical Acquisition in Android Forensics. In the first place, he suggests the following things to understand:
• Logical storage,
• System partition & Data partition,
• • Data Acquisition Methods.
In fact, there is plenty of free and commercial tools available to take an image of a specific partition. However, all of such tools require that the user should be the root of the device on the emulator. The device gets rooted temporarily even when using commercial tools before an image of a partition is taken through acquiring a physical dump.
In conclusion, his work, Joseph McCray talks about an instrument called “dd”. More information can be found in his article.
