Advanced logical extractions will leave you with the least amount of data to examine. As discussed in the previous slide, application data created by the user is often not extracted with logical or adb backup extractions. This pertains to Advanced logical extractions as well. When this type of acquisition is your only option, refer back to this section where we discuss methods to obtain more.

As seen in this slide, you will obtain a file system structure and Analyzed data that can be examined in keyword searched. Just keep in mind, you may be searching for something that was not extracted.