dissertation

Appendix BTool behaviourThe following are logs of the calls made by the forensics tools Cellebrite andXRY when told to extract the contact list from the phone. The contact listcontained two entries, each with a name and a phone number. The fieldscorrespond to the arguments to the main query function,com.android.providers.contacts.ContactsProvider2::query(Uri uri,String[] projection, String selection, String[] selectionArgs,String sortOrder).Documentation on the format of the data returned by these queries canbe found in the Android developer documentation for the ContactsContractclass [4].B.1 CellebriteThe application making these queries is called “com.client.appA”.URI : content : / / com . android . c o n t a c t s / r a w c o n t a c t sP r o j e c t i o n : n u l lS e l e c t i o n : n u l lS e l e c t i o n arguments : n u l lSort o r d e r : n u l lURI : content : / / com . android . c o n t a c t s / r a w c o n t a c t sP r o j e c t i o n : n u l lS e l e c t i o n : n u l lS e l e c t i o n arguments : n u l lSort o r d e r : n u l l61