📱 Maximising Investigative Opportunities from Android Devices, 3 March 2027
Latest in our Digital Investigation in Action series providing innovative operational best practice to help inform and enhance your digital strategy.
Our exclusive workshop aims to provide an operational insight into the investigative opportunities that can be gleaned from Android Devices.
It provides best practice to help investigators recognised potentially hidden or concealed digital evidence on Android Devices which could prove vital to the digital strategy and overall investigation.
It will highlight the limitations of conventional Android examinations and identify proportionate investigative opportunities from devices, Apps, accounts and associated cloud services.
👥 Who should attend?
The workshop is suitable for investigators, analysts, digital media investigators, digital forensics practitioners, safeguarding professionals and other personnel involved in the identification, seizure, examination or investigation of mobile devices.
No specialist technical knowledge is required.
🎓 Our expert
The workshop will be delivered by Neil Greenough, one of the UK’s most experienced digital investigators having served 30 years in Lancashire Constabulary. He was one of the first digital media investigators and provided digital advice on hundreds of major crime investigations as well as presenting his best practice case studies at numerous national conferences and CPD events. He has also worked in industry delivering digital training courses. He now runs his own digital training company.
📋 Outline of the day
Session One: An introduction to Android Forensics, the key issues and current challenges. Investigative opportunities around Android custom and hidden features and a consideration of what potential evidence you could be missing.
This could include:
-
Hidden Apps and protected content
-
Multiple users and guest profiles - separate environments containing Apps, accounts and data
-
Cloned and dual Apps - multiple accounts operating independently on the same handset
-
Hidden photos, videos and Files - private albums, safes and protected storage
-
Hidden Applications -Apps deliberately removed from the normal launcher and App list
-
Alternative PINs and credentials - protected areas that may require different credentials from the main handset
-
Recognising the Indicators - identifying clues that additional spaces, apps or protected data may exist.
Session Two: Alternative Mobile Operating Systems: what happens when Android isn't the Android you expect?
An introduction to custom ROMs and alternative mobile operating systems, why people install them, the additional privacy and security they can provide, and the features investigators should be aware of when encountering an unfamiliar handset.
We’ll look at the following elements:
-
Decoy and duress PIN functionality
-
Multiple user profiles
-
Separate App environments
-
Google-free devices
-
Alternative App stores
-
Enhanced permission controls
-
Non-standard interfaces – familiar Android examination pathways and settings may be located somewhere completely different on the device.
Session Three: Encrypted and Privacy Focused Communications: WhatsApp and Signal are only the beginning. A look at why people are using them and key considerations for investigators.
An introduction to encrypted, privacy-focused and decentralised communication platforms, why people choose them, how they differ from conventional messaging services, and the features investigators should recognise when encountering them on a device. These include:
-
WhatsApp - end-to-end encrypted messaging, disappearing messages, locked chats, linked devices and backups
-
Signal - privacy-focused communications, disappearing messages, usernames and minimal service-side data
-
Telegram - cloud chats, Secret Chats, channels, groups, usernames and multiple accounts
-
SimpleX Chat - communications designed without conventional permanent user identifiers
-
Briar - peer-to-peer communications with Tor and the ability to communicate directly between devices in some circumstances
-
Session - privacy-focused decentralised messaging designed to minimise identifying metadata
-
Threema - encrypted communications that can be used without linking an account to a telephone number
💻 Held online via Teams
📜 Certificates of CPD available
HOW TO BOOK
Cost: £214.99 + VAT (GBP) per delegate per workshop (LEA and Government Agency rate). £249.50 + VAT (Industry rate), per delegate
Group bookings: We offer various discounts for group bookings depending on numbers, please contact us for details.
Booking: Please send the delegates name(s), email address(es) and purchase order (made out to The Investigator) to booking@the-investigator.co.uk or telephone +44(0)844 660 8707 for further information.
Payment can be made by PayPal/debit/credit card. The meeting link will be sent out 7 days before the event.
HOW TO BOOK
Cost: £214.99 + VAT (GBP) per delegate per workshop (LEA and Government Agency rate). £249.50 + VAT (Industry rate), per delegate
Group bookings: We offer various discounts for group bookings depending on numbers, please contact us for details.
Booking: Please send the delegates name(s), email address(es) and purchase order (made out to The Investigator) to booking@the-investigator.co.uk or telephone +44(0)844 660 8707 for further information.
Payment can be made by PayPal/debit/credit card. The meeting link will be sent out 7 days before the event.