Zimmermann, ChristianSpreitzenbarth, MichaelSchmitt, SvenFreiling, Felix C.Suri, NeerajWaidner, Michael2018-11-192018-11-192012978-3-88579-289-5https://dl.gi.de/handle/20.500.12116/18263In contrast to traditional file systems designed for hard disks, the file systems used within smartphones and embedded devices have not been fully analyzed from a forensic perspective. Many modern smartphones make use of the NAND flash file system YAFFS2. In this paper we provide an overview of the file system YAFFS2 from the viewpoint of digital forensics. We show how garbage collection and wear leveling techniques affect recoverability of deleted and modified files.enText/Conference Paper1617-5468