Skip to main content

 

Druva Documentation

Back up and download mobile forensics data

inSync Cloud Editions: File:/tick.png Elite Plus File:/tick.png Elite File:/cross.png Enterprise File:/cross.png Business

How to back up mobile forensics data?

To back up data using the mobile forensics capability, you have to configure Profiles from the inSync Management console. You can configure the settings either while creating a profile or by updating an existing profile.

Creating a profile

To create a profile

  1. On the inSync Master Management Console menu bar, click Profiles.
  2. Click Create New Profile. The profile creation wizard appears.
  3. Provide the appropriate information in each field. For more information, see Fields in the profile creation wizard
  4. On the General tab, select the Allow access from mobile devices check box.
  5. On the Devices > Smartphones & Tablets page, select the Enable mobile backup check box.
  6. Under the Android tab, select the App Settings, Call Logs & Messages check box.
  7. Click Next to enter additional information for the profile. 
  8. Click Finish.

For more information, see Create a profile.

Updating an existing profile

To update the existing profile

  1. On the inSync Master Management Console menu bar, click Profiles.
  2. Click the profile that you want to update. 
  3. On the profile page, select the Mobile Access & Backup tab.
  4. On the General tab, select the Allow access from mobile devices check box.
  5. On the Devices > Smartphones & Tablets page, select the Enable mobile backup check box.
  6. Under the Android tab, select the App Settings, Call Logs & Messages check box.
  7. Click Save.

For more information, see Update a profile.

Note: Global folder and file exclusions will not be applicable while backing up forensics data on Android devices.

Track the administrator-related activities

After creating or updating a profile, you can view the updates made to the profiles from the Admin Audit Trails.

To track the administrator activities

  1. On the inSync Master Management Console menu bar, click Governance > Audit Trails. The Audit Trails page appears.
  2. Click the Admin Audit Trails tab. The list of activities appears in the right pane.

For more information, see View audit trail for administrators.

How to download the mobile forensics data?

After you configure the mobile forensics capability, the mobile forensics data is collected according to the configured schedule for the Android devices. You can download the forensics data for an Android device after the first backup is completed. However, you cannot restore the forensics data.

Download_forensics_data.png

To download the forensics data for an Android device

  1. On the inSync Master Management Console menu bar, select Availability > Users.
  2. From the All Users list, select the user whose data you want to download.
  3. Click Restore.
  4. On the Restore Data window, click the device and then select the snapshot from which you want to download the forensics data.
  5. If you want to download the entire forensics data, select ForensicsData and then click Download.

    A ZIP folder is downloaded to the default download location of your web browser, which contains a CSV file for each type of forensics data. For example, app_logs.csv, browser_history.csv, call_logs.csvdevice_info.csv, and sms.csv.

  6. If you want to download specific data, click ForensicsData. A list of files that are available for download appears.
  7. Select the files that you want to download, and then click Download.

The selected data is downloaded as a CSV file to the default download location of your web browser.