7/22/2019 Anlisis forense a sistemas android / Rafael Gmez del ngel

1/42

Fjnlsls Dbrajsa f slstakfs

Fjirbli

www.j0xfsa`.`bk

Sajtastar? ]fdfan Gkaz Ian jganIlra`tbr ia J0XFsa`Ib`ajta ia nf `artldl`f`lj? DIK Dbrajsa Ljvastlgfibr ia ilspbsltlvbs kvlnas.

ljdbCj0xfsa`.`bk

7/22/2019 Anlisis forense a sistemas android / Rafael Gmez del ngel

2/42

Vua as nf ljdbrktl`f dbrajsa2

As ujf `laj`lf partaja`lajta f nf sagurlifi ljdbrktl`f, nf `ufn sa aj`frgf iara`uparfr, ra`bna`tfr y prasarvfr tbib tlpb ia ljdbrkf`lj yf saf vbntln b jb vbntln.

7/22/2019 Anlisis forense a sistemas android / Rafael Gmez del ngel

3/42

@bjsarvf`lj ia nf avliaj`lf y su

njaf ian tlakpb

@ufjib sa rafnlzf uj fjnlsls dbrajsa ia iamaj tbkfr aj `ufjtfnbs slgulajtas fspa`tbs

@un as nf as`ajf ian `rlkaj 2Aj qua `bjil`lbjas sa aj`uajtrf 2

@un as juastrb bmoatb ia fjnlsls2

NLJAF IAN YLAKSB

7/22/2019 Anlisis forense a sistemas android / Rafael Gmez del ngel

4/42

Tarslbjas ia Fjirbli aj an kar`fib

@anunfras

Fjirbli =.=Fjirbli =.0Fjirbli 9

Yfmnatfs

Fjirbli 0Fjirbli 0.=

GSPIlspbsltlvbs ia punsb

Futbkvlnas@kfrfs dbtbgrdl`fsYanavlslbjasAt`.

7/22/2019 Anlisis forense a sistemas android / Rafael Gmez del ngel

5/42

Frqulta`turf ia Fjirbli

7/22/2019 Anlisis forense a sistemas android / Rafael Gmez del ngel

6/42

Ylpbs ia kakbrlf y gastbras ia

frrfjqua

Kakbrlf ]FK? As nf qua sa aj`frgfrf ia fnkf`ajfr ljdbrkf`lj vbntln `bkb nf`f`ha ia ljl`lb ia saslj ia fngj kajsfoarb.

Kakbrlf JFJI ? As fquannf qua trfmfof mfob an slstakf ia fr`hlvbs yfdds=, yfnkf`ajf ljdbrkf`lj vfnlbsf `bkb `bjtrfsafs, kajsfoas sks, ljdbrkf`lj ianGSP at`, sa ranf`lbjf ilra`tfkajta `bj ljdbrkf`lj ia nf f`tlvlifi ian hfriwfra

`bkb nf fjtajf 0G, Mnuatbbth, GSP, `bjaxlj f iftbs.

Kakbrlf PI? as nf qua fnkf`ajfrf ljdbrkf`lj ranf`lbjfif `bj an usufrlb tfnas`bkb, dbtbgrfdfs, vliabs, hlstbrlfn ia `bjvarsf`lbjas, mf`eup ia `bjdlgurf`ljat`.

PLK? As nf qua sa aj`frgf ia fnkf`ajfr ljdbrkf`lj tln pfrf rafnlzfr nf `bjaxlj`bj an prbvaaibr ia sarvl`lbs, tfkmlj puaia fnkf`ajfr ljdbrkf`lj `bkbkajsfoas sks y an ilra`tbrlb tanadjl`b.

7/22/2019 Anlisis forense a sistemas android / Rafael Gmez del ngel

7/42

Srapfrfjib juastrb nfmbrftbrlb

Iamakbs ajtajiar qua pfrf fjfnlzfr an slstakf ia fr`hlvbs \FDDP= iamakbsljstfnfr an ljtarprata, parb `bkb nb nbgrfkbs 2

6.-As`bgar juastrf ilstrlmu`lj pradarlif ia Nljux, pradarajtakajta ujf quaasta aj`fkljfif f nf fuiltbrf dbrajsa b an pajtast, `bkb nb as @FLJA bMf`etrf`e

=.-]a`bkplnfr an earjan pfrf fgragfr an sbpbrta pfrf il`hb slstakf ia fr`hlvbs.

0.- Ljstfnfr uj fkmlajta ia iasfrrbnnb pfrf Fjirbli, `bkb nb as an PIE y QjLia `bkb Jatmafjs.

7/22/2019 Anlisis forense a sistemas android / Rafael Gmez del ngel

8/42

Nfmbrftbrlb

7/22/2019 Anlisis forense a sistemas android / Rafael Gmez del ngel

9/42

Tajtfof ia akunfr nf lkfgaj ia Fjirbli

FDNbgl`fn

Nbgs

7/22/2019 Anlisis forense a sistemas android / Rafael Gmez del ngel

10/42

]bbtafjib nf varslj ia Fjirbli

Nf bmtaj`lj ian f``asb rbbt aj nf tarkljfn as prlkbrilfn yf quajbs fyuifrf f nf aoa`u`lj ia `bkfjibs frmltrfrlfkajta

Yarkljfn

akunftbr

7/22/2019 Anlisis forense a sistemas android / Rafael Gmez del ngel

11/42

Nf `bjb`aj2

7/22/2019 Anlisis forense a sistemas android / Rafael Gmez del ngel

12/42

Y`jl`fs pfrf avfilr nf prbta``lj

ia pfjtfnnf

Pkuiga Fttf`e

An `uarpb hukfjb aj an trfjs`ursb ian if sa`ratf `lartb tlpb

ia f`altas aj nbs iaibs, nbs `ufnas mfob nf nuz untrfvlbnatf

astbs f`altas rasfntfj

7/22/2019 Anlisis forense a sistemas android / Rafael Gmez del ngel

13/42

Ftfqua ia duarzf mrutf

7/22/2019 Anlisis forense a sistemas android / Rafael Gmez del ngel

14/42

P`raaj nb`e mypfss Fpp

Astf harrfklajtf jbs parklta rafnlzfr uj ftfqua ia duarzf mrutf pfrfiasmnbquafr nf `bjtrfsaf jukarl`f ian ilspbsltlvb.

As kuy ljvfslvf@brrakbs an rlasgb ia trbjfr nf kakbrlf ]FKAn ilspbsltlvb iama astfr rbbtafib

7/22/2019 Anlisis forense a sistemas android / Rafael Gmez del ngel

15/42

Liajtldl`f`lj ia pfrtl`lbjas

y dl`harbs

7/22/2019 Anlisis forense a sistemas android / Rafael Gmez del ngel

16/42

Liajtldl`fjib nbs pujtbs ia kbjtfoa ian slstakf

/iav/mnb`e/ktimnb`e6 /systak, /iav/mnb`e/ktimnb`e