Mobile Forensics Cookbook
上QQ阅读APP看书,第一时间看更新

There’s more…

A physical dump can be created by the dd if = / dev / block / partition's name of = / sdcard / NAME_partition.img command.  The names of the device partitions can be viewed by the adb utility. Data and user files are stored in the userdata partition.