All right, let's get ready for this.
Buckle your seat belts.
Here comes the awful health.
So I used to do this horrible thing in this class
where I never talked about health,
and then you got hit with a health in the lab.
And people would struggle and have no idea where to start.
So I decided to be a little bit nicer about it.
About a year and a half ago, Josh Hickman and I
decided we were going to work together and do
these amazing presentations on Android Health.
I took Samsung.
He took Garmin and some of the other ones.
And we found it was a nightmare.
After about a month and a half of us working out
with these watches, taking walks, doing all these things,
we quit.
And honestly, we quit because it was too difficult.
None of the tools were parsing it.
Data is everywhere.
Each OS version of the data changes.
Make sure, for these little snippets
of different health you're going to get from Android devices,
that you verify and validate.
Josh and I have barely scratched the surface on this.
So let's start with Samsung.
Your data is going to be stored in databases and text files .
A lot of the databases will be encrypted.
If you get a full file system acquisition,
like you can see on the right-hand side under
com.sec.android.app.health--
sorry shealth for Samsung Health--
you're going to have a whole bunch of files.
Do
You notice cache is cleared?
Under databases, we have 12 databases.
And some of these will be really helpful to you.
But we also have these log files.
These log files, look at the time
stamps of them, 2021-08-15, 2021-08-16.
You have m files and r files.
I'm not sure what the m and the r stands for,
but it seems like m is about the activity.
And I like to think r as real workout.
So that's just kind of how I remember it.
You want to look at the r file.
In your lab, the r file is enormous for the day
of interest because it's tracking every single step
I took in that day--
not only workouts.
Now, where you have to be careful--
if I am murdered right here, and the police arrive,
and they take my Samsung, and they walk over to another table
to acquire it, their footsteps will be tracked on that device.
So it doesn't mean the user had taken footsteps.
It means someone else could have.
When you're looking at this, export these text files.
I'm going to show you a trick.
I have this tool in here called Agent Ransack.
You can point it to any file.
I like to point it to those text files
and have it do some grep searching
and keyword searching of it.
It's just a nice graphical user interface
that you can use to interact with any file
or folder of directory.
If you run a Fuzzy Model Plugin, if you
run dynamic app finder in the App Genie,
it may help get you started.
So those are some clues for your lab.
The lab is not easy with this question,
and I apologize in advance.
I had some beta testers try it, and they were honest.
They're like, Heather, I don't even know where to start.
I have no idea.
If you feel that way, it's fine.
Use the walkthrough.
Review my walkthrough.
And just keep practicing because I guarantee,
you're going to see it at some point.