hemu1438/forensicsgpt-training-data huggingface dataset:
Cell Phones – Digital Corpora
Android Images
The following Android images are available:
Android 13 [INFO]
Android 12 (41.9GB) [INFO]
Android 11 (10.9GB) [INFO]
Android 10 [INFO]
Android 9 [INFO]
Android 8 [INFO]
Android 7 [INFO]
Images of cell phones, contributed by Svein Y. Willassen, Norwegian University of Science and Technology.
All of the below can be found at https://downloads.digitalcorpora.org/corpora/mobile/:
Nokia_6230 Contents of a Nokia 6230 Cell Phone
SE_P800 Contents of a SE P800 Cell Phone
SE_T68i Contents of a Nokia T68i Cell Phone
SE_T630_images Contents of a Nokia T630 Cell Phone with many digital images
SE_T630_images-deleted Contents of the T630 Cell Phone after the digital images were deleted
Android 13 – Digital Corpora
An image of Android 13 was created using a stock Android image from Google. Several popular applications (apps) were populated with user data utilizing the capabilities of each individual app. The stock Android apps were also populated with user data.
All times listed in the solutions document are yyyy-mm-dd / hh:mm.
All events prior to 2022-08-17 at 15:42 (UTC -0400) are in 24-hr, Central Daylight Time (UTC -0500).
All events between 2022-08-17 at 15:42 (UTC -0400) are in 24-hr, Eastern Daylight Time (UTC -0400).
All events on or after 2022-11-06 at 02:00 (UTC -0400) are in 24-hr, Easter Standard Time (UTC -0500).
Some of the data available in the apps were sync’d with data that had been previously populated. Information about the previously populated data can be found in the documentation of the various images, which can be found at https://thebinaryhick.blog.
Thanks to Joshua Hickman for providing this image.
The Android 13 image can be found here: https://downloads.digitalcorpora.org/corpora/mobile/android_13/
Extracted files:
android_13_data.tar.gz
Celebrite Reader file: android_13_Celebrite_Reader.tar.gz
Encrypted solutions: android_13_imagecreation_solution.pdf
Android 13 XRY analysis: Android_13_MSAB.xry (requires XAMN Viewer)
Browse all of the files:
https://corp.digitalcorpora.org/corpora/mobile/android_13/
PHONE INFORMATION
Make:       Google
Model:      Pixel 5a
Storage:    128 GB
RAM:        6 GB
Carrier 1:  Google Fi
Serial:     1B031JEG500741
Wi-Fi MAC:  14:22:3b:f3:f1:67
BT MAC:     14:22:3b:f3:f1:66
Android 7 – Digital Corpora
Android 7 is the contents of a LG GSM H790 Nexus 5X phone. It is distributed as a compressed tar file called android_7.tar.gz that contains:
          0  Android 7/
        1077  Android 7/LG GSM_H790 Nexus 5X.ufd
 31268536320  Android 7/blk0_mmcblk0.bin
      399134  Android 7/Android7-ImageCreationDocumentation.pdf
     4194304  Android 7/blk32_mmcblk0rpmb.bin
        9021  Android 7/procdata.zip
       17076  Android 7/Android 7 Hashes.pdf
      244453  Android 7/Takeout Data/Snapchat - thisisdfir/mydata~1543946597209.zip
    17122745  Android 7/Takeout Data/Google - thisisdfir(at)gmail.com/takeout-20181204T161119Z-001.zip
       17580  Android 7/Takeout Data/WhatsApp - 919-758-0276/access.html
        1584  Android 7/Takeout Data/WhatsApp - 919-758-0276/portability.json
      121022  Android 7/Takeout Data/Instagram - thisisdfir(at)gmail.com/thisisdfir_20181204.zip
      426490  Android 7/Takeout Data/Twitter - (at)TDfir/twitter-2018-12-04-1fbea4f27668f929a907214ff59b0709576b2bae541a44c9b4ad2fa15062dfaf.zip
     4027833  Android 7/Takeout Data/Facebook Messenger - 919-758-0276/facebook-100030861781799.zip
You can download Android 7 from: https://downloads.digitalcorpora.org/corpora/mobile/android_7.tar.gz
Checksums are available at:
https://downloads.digitalcorpora.org/corpora/mobile/
Additional information appears below:
Android Image Information
As of October of 2018, Android 7 (Nougat) is the most popular version of Android in use today (28.2%), and, as such, it is important that the digital forensic community understand its inner workings; it would be ideal to have a Nougat image with strong documentation to widely available to the digital forensic community to use for research, education, and training. To help with this initiative, we are presenting an image of Android 7 (Nougat) populated with documented data over a period of seven days. This image is freely available to the digital forensic community.
The image is in a binary format and can be examined in numerous digital forensic tools.
The following files are included with the image:
Android7-ImageCreationDocumentation.pdf Documentation of the contents of the image. The information in this document represents the known actions taken with the device during the testing period, along with information about the test device itself. blk0_mmcblk0.bin and blk32_mmcblk0rpmb.bin The image files in binary format. ImageHashes.pdf Documented hash values of the image files and the pocdata.zip file. LG GSM_H790 Nexus 5X.ufd UFED file generated as a result of the extraction process. This file can be used to open the image in Cellebriteâ€™s Physical Analyzer application. Opening this file in Windows Notepad or similar application provides information about the extraction. Procdata.zip A zip file that contains metadata about the extracted partitions of the device and hardware components of the test device. Takeout Data A folder that contains takeout data from the electronic service providers (ESPs) that offered takeout services. The ESPs represented in this folder are those whoâ€™s apps were used on the device.
Android 8 – Digital Corpora
Android 8 is a LG GSM H790 Nexus 5X cell phone. It is distributed as a compressed tar file.
android_8.tar.gz contains:

           0  Android 8/
        1203  Android 8/LG GSM_H790 Nexus 5X.ufd
 31268536320  Android 8/blk0_mmcblk0.bin
     4194304  Android 8/blk32_mmcblk0rpmb.bin
        4168  Android 8/procdata.zip
      457094  Android 8/Android8-ImageCreationDocumentation.pdf
       17069  Android 8/Android 8 Hashes.pdf
     1789792  Android 8/Takeout Data/Twitter-TDfir.zip
    36296652  Android 8/Takeout Data/GoogleTakeout-thisisdfir(at)gmaildotcom.zip
        6813  Android 8/Takeout Data/WhatsApp-thisisdfir-accountdata.zip
     4320066  Android 8/Takeout Data/facebook-100030861781799.zip
      353055  Android 8/Takeout Data/Instagram-thisisdfir.zip
      272449  Android 8/Takeout Data/Snapchat-thisisdfir.zip
You can download Android 8 from: https://downloads.digitalcorpora.org/corpora/mobile/android_8.tar.gz