Dumpsys batterystats

Batterystats is used to show the usage of running applications. Its output can be very verbose, depending on the number of applications in use; in the following screenshot, the output was redirected to a file because it did not fit in the Windows command line:

This shows us the network usage of Google Chrome. This information can be used to show that the application had been used recently, and this information will exist even if Chrome was used in Incognito Mode and leaves no forensic evidence elsewhere.

Note that the Wakelock section can be very useful for detecting malware. A wakelock is a method of keeping the device awake (that is, not entering sleep mode) and is indicative of an application attempting to stay running in the background.

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset
13.58.82.79