Let's talk about Android 12.
Android 12 introduced some changes.
First and foremost, we have a new file format--
ABX.
ABX is replacing XML.
The tools are struggling with this.
ALEAPP leap will parse ABX, and we're
going to use ALEAPP in the later section of this Section 2.
Cellebrite should be parsing ABX soon,
by the time you're taking this class.
It could happen tomorrow.
Hopefully, it's there.
Just know, if you see ABX file format,
ALEAPP, which is open-source, will parse it.
We also have new things that are introduced.
Privacy dashboard-- anything that protects you
as a user that is supposed to lock down the device and track
things that are running and stop things that are unnecessary
helps us forensically.
We're going to take a look at that in the advanced decoding.
Shut down checkpoints--
I don't know how this helps you as a user,
but it's awesome for us forensically.
Every time the user is shutting down their device,
powering it up, putting in different modes, amazing for us
with forensics.
That's going to help us.
And battery usage-- so we always had battery stats.
And you're going to see that later
in this section, where it was tracking
what was killing the battery.
And we saw a glimpse of that in dumpsys
when we saw the app or Google Maps with that unique ID.
There's now a new category called Battery Usage.
And We're going to be looking at these shortly,
but I want to mention it here because, as we go through,
Android 12 is still being researched.
There are new artifacts.
Make sure you're leveraging your cheat sheet,
and you're looking at these slides
to learn new things that may not be parsed by your tools.