The importance of volatile memory analysis has long been proven.
The rapid rise of new technologies requires the forensics experts to adopt new requirements. Recent growth of the Android platform made the development of a memory forensics solution inevitable for this ecosystem also. The goal of this workshop is to familiarize the audience with the currently available Android forensics solutions by hands-on experience. After a brief overview of the possible solutions, participants will learn how to acquire memory samples from an Android device. Further on the analysis of the memory images will be discussed with the help of Volatility, the well-known memory forensics framework.