Investigating Android Yahoo Mail
09/08/2024 Friday
Yahoo Mail allows users to connect globally and access their accounts on various devices, including desktops, laptops, and mobile phones. It supports external mail providers like Outlook, Gmail, and AOL. Additionally, Yahoo Mail offers features such as messaging, calendar, contacts integration, and one terabyte of storage capacity. The mobile apps include features like a composing assistant, smart contacts, account key, and document preview.
Digital Forensics Value of Android Yahoo Mail
Yahoo Mail on Android serves as a crucial communication platform, making it an essential source of digital evidence. Forensic analysis of Yahoo Mail artifacts can provide critical insights into user interactions, email exchanges, and account activity. This information is invaluable for tracking criminal activities, uncovering evidence, and reconstructing timelines in investigations.
Location of Android Yahoo Mail Artifacts
Android Yahoo Mail artifacts can be found at the following location:
data\com.yahoo.mobile.client.android.mail\databases\flux_database.db
Analyzing Android Yahoo Mail Artifacts with ArtiFast
This section will discuss how to use ArtiFast to extract Android Yahoo Mail artifact from Android devices' files and what kind of digital forensics insights we can gain from the artifact.
After you have created your case and added evidence for the investigation, at the Artifact Selection phase, you can select Android Yahoo Mail artifact parsers:
×
Once ArtiFast parsers plugins complete processing the artifact for analysis, it can be reviewed via “Artifact View” or “Timeline View,” with indexing, filtering, and searching capabilities. Below is a detailed description of Android Yahoo Mail artifact in ArtiFast.
Yahoo Mail Accounts
- User ID: The user ID.
- Email: The email address associated with the account.
- Login Time: Email login date and time.
- Mail Provider: The name of the webmail provider.
- Name: The account name.
- Owner’s First Name: The account owner’s first name.
- Owner’s Last Name: The account owner’s last name.
Yahoo Mail Attachment
- Time: The attachment file creation date and time.
- Message ID: The message ID that contains the attachment file.
- File Name: The file name of the attachment.
- File Type: The type of attachment.
- File Size: The size of the attached file.
- Sender Name: The email sender’s name.
- Email Address: The receiver's email.
Yahoo Mail Email Messages
- Subject: The subject of the email.
- From address: The sender of the email.
- To address: The receiver of the email.
- Is Read: Indicates if the email was read.
- Email Date/Time: The date and time when the email was sent or received.
- Has Attachment: Indicates whether the email has an attachment.
- Email Snippet: A snippet of the email.
- CC: A CC of the email.
- BCC: A BCC of the email.
- Body: The content of the email.
For more information or suggestions please contact: ekrma.elnour@forensafe.com
