dissertation

Figure 5.11: Cellebrite extraction report showing hardcoded false dataFigure 5.12: XRY extraction report showing hardcoded false dataExtractions of the phone contact list will be performed using Cellebriteand XRY. They should not see the two contacts in the real contact list, butonly their own technical support phone numbers.Both Cellebrite (figure 5.14) and XRY (figure 5.15) saw only their ownsingle technical support contact.5.4.6 Delayed restorationThe phone will be reinstalled using a modified CyanogenMod 7.2 operatingsystem. The contact list provider will have been modified to return resultsfrom alternate databases, as in the previous test. In addition, the providerwill be modified so as to continue returning the same false contact list untilthe USB cable has been unplugged for thirty seconds, regardless of whichtool requests it./data/data/com.android.providers.contacts/databases/xry.db41