Skip to content

Data Extraction

Jump to bottom
Swapnal Shahil edited this page Aug 11, 2021 · 3 revisions

Data Extraction

OpenMF is currently able to extract data of SMS(text messages), Facebook, WhatsApp, Browser history, Bluetooth data, EXIF data from images, Location history, General information of the device, Call logs, and Contacts. Data can be extracted from CMD as well as using API(POSTMAN) or from Frontend also.

**Extract Data from rooted Android device**

Connect a rooted Android device using a data cable to your system, make sure that you have enabled the USB debugging.

Run the following code python collector.py --option all --session_name CaseName --tags tag1,tag2

Convert the data .db files to readable format like .tsv/.json

Run converter.py and pass three arguments, the first one contains path to .db file, the second argument contains desired path to store converted files and the last argument contains file type (either .json or .tsv ) for e.g. python converter.py /home/user/Downloads/accounts.db /home/user/data/ json converts accounts.db files in .json format.

  1. SMS: Data like thread_id, address, date, date_sent, read, body, creator, seen, sim_slot, sim_imsi.
  2. Facebook: Data like text, contacts, senders name, timestamp, profile id.
  3. WhatsApp: Data like mobile number, time, text, type, media name.
  4. Browser History: Data like URLs, URLs title, Visit count, Urls last visit time, hidden, visit time, visit duration, visits transition, visit source.
  5. Bluetooth: Data like shared file path, name of the file, data, type, direction, destination, visibility, status, total bytes, timestamp, device name.
  6. EXIF data: Data from images like file path, size, date taken, mime_type, title, description, display name, Picasa id, orientation, latitude, longitude, date added, date modified, mini_thumb_magic, bucket id, bucket display name, album, tags, category, language, storage id, width, and height.
  7. Location: Data like latitude, longitude, timestamp, and saved location link.
  8. General Information: Data like Shell permission, ADB serial, Manufacturer, Model number, IMEI, Android Version, Build name, Wifi MAC, Local time, Android time, Accounts, Case Name, and Tags.
  9. Call logs: Data like number,name,date,duration,type,location, and frequent.
  10. Contacts: Data like phone number and display name.
Clone this wiki locally