Not All Androids Who Wonder Are Lost. Exploring Android's Find My Device System 

In 2021 Apple introduced the AirTag as a way to keep track of things you care about the most. Almost immediately there were privacy concerns that arose about potential misuse by stalkers and others with nefarious intentions, and Android users were affected the most. Since then, Android users have gained the ability to detect rogue AirTags and, with the enhancement to Google's Find My Device network, other Bluetooth trackers. Additionally, they have also gained the ability to natively track other compatible Bluetooth trackers made by third parties. This presentation will delve into the Find My Device system, identify artifacts that are left behind due to an Android phone encountering rogue trackers and trackers that may be associated with the Android owner's Google account, and any tracker data that may reside with Google and available via Takeout or legal process.
SANS DFIR Summit 2024
Not All Androids Who Wonder Are Lost. Exploring Android's Find My Device System.
Speaker: Joshua Hickman, Digital Forensics Expert, Cellebrite
View upcoming Summits: www.sans.org/u/DuS