LabCIF - Forensic Analysis for Mobile Apps
Getting Started
Android extraction and analysis framework with an integrated Autopsy Module. Dump easily user data from a device and generate powerful reports for Autopsy or external applications.
Functionalities
Report Screenshots
Prerequisites
How to use
The script can be used directly in terminal or as Autopsy module.
Running from Terminal
usage: start.py [-h] [-d DUMP [DUMP ...]] [-p PATH] [-o OUTPUT] [-a] app
Forensics Artefacts Analyzer
positional arguments:
app Application or package to be analyzed <tiktok> or <com.zhiliaoapp.musically>
optional arguments:
-h, --help show this help message and exit
-d DUMP [DUMP ...], --dump DUMP [DUMP ...] Analyze specific(s) dump(s) <20200307_215555 ...>
-p PATH, --path PATH Dump app data in path (mount or folder structure)
-o OUTPUT, --output OUTPUT Report output path folder
-a, --adb Dump app data directly from device with ADB
-H, --html Generate HTML report
Running from Autopsy
python_modules
folder.Build an application module
Do you need a forensics module for a specific Android application? Follow the instructions here and build a module by yourself.
Authors
Mentors
Project developed as final project for Computer Engineering course in Escola Superior de Tecnologia e Gestão de Leiria.
Environments Tested
License
This project is licensed under the terms of the GNU GPL v3 License.
github.com/98jfran
github.com/bpampuch/pdfmake
github.com/eisbehr-/jquery.lazy
github.com/feathericons/feather
github.com/labcif/FAMA
github.com/labcif/FAMA/archive/master.zip
github.com/labcif/FAMA/blob/master/modules/README.md
github.com/Leaflet/Leaflet
github.com/mdegrazia/SQLite-Deleted-Records-Parser
github.com/mfrade
github.com/PatricioDomingues
github.com/rubnogueira
github.com/witwall/undark