The partition layout varies between vendors and versions, but a few partitions are present in all Android devices. The following are some of the common partitions found in most Android devices:

• BOOT: As the name suggests, this partition has the information and files required for the phone to boot. It contains the kernel and the RAMDisk and so, without this partition, the phone can't start its processes.
• CACHE: This partition is used to store frequently accessed data and various other files such as recovery logs and update packages downloaded over-the-air.
• RECOVERY: Recovery partition allows the device to boot into the recovery console through which activities such as phone updates and other maintenance operations are performed. For this purpose, a minimal Android boot image is stored, which serves as a failsafe.
• SYSTEM: All of the major components other than the kernel and RAMDisk are present here. The Android system image here contains the Android framework, libraries, system binaries, and pre-installed applications. Without this partition, the device cannot boot into normal mode.
• USERDATA: This partition is usually called the data partition and is the device's internal storage for application data. A bulk of userdata is stored here and this is where most of our forensic evidence will reside. It stores all app data and standard communications as well.