Android Analyzer (aLEAPP)

Table of Contents

• Overview
• Using the Module
• Seeing Results

Overview

The Android Analyzer ingest module runs aLEAPP (https://github.com/abrignoni/aLEAPP) and converts the results into results that can be viewed in Autopsy.

Using the Module

Select the checkbox in the Ingest Modules settings screen to enable the Android Analzyer (ALEAPP) module. The module will run on .tar/.zip files found in a logical files data source or a disk image.

Seeing Results

Results from the Android Analyzer module will appear in the Tree Viewer under Results->Extracted Content.