Mobile Forensics Solution for Cloud Permission Challenges: Xiaomi Smartphones Case Study

Abstract

With the tremendous and rapid advancements in mobile device forensics, traditional forensic methods and tools often become ineffective due to the evolving diversity of devices and their constant internet connectivity. This study addresses the challenge of obtaining application permissions during the acquisition phase, particularly the difficulties in accessing the full contents and databases of applications due to permission restrictions. We highlight several critical aspects, including the challenges faced by law enforcement in using forensic tools on Android systems, and the phases of seizure, acquisition, and data extraction. Additionally, we examine vulnerabilities in current forensic tools when handling Android devices, especially in the context of Xiaomi Cloud. This research presents methods for bypassing application permissions using third-party tools. As a result, we successfully bypassed security settings on Android devices, allowing the acquisition software (XRY) to downgrade applications despite initial restrictions. This demonstrates a practical approach to overcoming forensic limitations.