After all of the research I have done this semester looking at the Galaxy Gear watch I have found that it is possible to find some artifacts of importance on the watch. Some artifacts that can be found on the watch include all notifications that are shown on the watch at any given time. These notifications include text messages, e-mails, tweets, and Facebook notifications. All of these artifacts are located in a database file under the directory of /data/data on the watch.
It was also possible to pull pictures from the watch without gaining root access using ADB. Lastly it was possible to see who was logged into Facebook on the watch using the Facebook xml file located under /data/data. This will at least allow for someone to figure out the current user of the Samsung Galaxy Gear. To move and pull files I used ADB and to actually analyze all of the files from the watch I used Autopsy from The Sleuth Kit.
No comments:
Post a Comment