Open-Source tools such as NCat and BusyBox were used to get a physical image of the Android data partition. Then, Autopsy was used to analyze and extract data out of the physical image. Data such as contact numbers, Whatsapp messages, web history, calendar information, Google Maps saved address, images and notes were found.