Investigating Android Digital Wellbeing
12/04/2024 Friday
Android Digital Wellbeing is an application designed to help users better understand and manage their digital habits, promoting a healthier relationship with technology. It has features such as providing a detailed overview of device usage patterns, including time spent on specific apps and notifications received. Additionally, users can set app timers to limit their usage of specific applications. Android Digital Wellbeing aims to empower users to make informed decisions about their digital usage, fostering a more balanced and mindful approach to technology consumption.
Digital Forensics Value of Android Digital Wellbeing
The Digital Forensics Value of Android Digital Wellbeing lies in its potential to provide valuable insights into a user's digital behavior and habits. Forensic analysts can utilize the collected information on screen time, app usage, and notification history to assist them in reconstructing timelines of device usage, understanding patterns of behavior, and identifying correlations between app usage and specific events. Additionally, the app's ability to set app timers can provide evidence of intentional efforts by users to manage their digital wellbeing.
Location of Android Digital Wellbeing Artifacts
Android Digital Wellbeing artifacts can be found at the following location:
/data/com.samsung.android.forest/databases/dwbCommon.db
/data/com.google.android.apps.wellbeing/databases/app_usage
Analyzing Android Digital Wellbeing Artifacts with ArtiFast
This section will discuss how to use ArtiFast to extract Android Digital Wellbeing artifact from Android machines’ files and what kind of digital forensics insights we can gain from the artifact.
After you have created your case and added evidence for the investigation, at the Artifact Selection phase, you can select Android Digital Wellbeing artifact parsers:
×
Once ArtiFast parsers plugins complete processing the artifact for analysis, it can be reviewed via “Artifact View” or “Timeline View,” with indexing, filtering, and searching capabilities. Below is a detailed description of Android Digital Wellbeing artifact in ArtiFast.
Android Digital Wellbeing Events
- Date/Time : The date/time when the event happened.
- Event ID : The ID of the event.
- Package Name : The name of the package that generated the event.
- Event Type : A number for the event type.
- Event Type Description : The textual description for the event type.
Android Digital Wellbeing Log
- Logged Date/Time : The date/time when the log record was created.
- Row ID : The ID of the log record.
- Key : The key of the log record.
- Value : The value of the log record.
For more information or suggestions please contact: kalthoum.karkazan@forensafe.com
