Digital Forensic Analysis of AGPTEK Smartwatch Application on Android OS

As wearable IoT devices become more popular, the likelihood for digital forensic investigators and analysts to encounter them in the field increases. Smartwatches are one of the most popular wearable IoT devices today, and many brands and devices have yet to be analyzed. Analysis of such devices plays an integral role in criminal investigations, as data collected by these devices may be used as inculpatory or exculpatory evidence. This paper provides a forensic analysis of the AGPTEK smartwatch application (FitCloudPro) on Android OS for both a non-rooted and rooted smartphone. The smartwatch was worn for a data population period while paired with the smartphone. The phone was then imaged using Magnet AXIOM Process and analyzed using Magnet AXIOM Examine. Directories, files, and databases of interest are documented. The smartwatch application creates one major database containing user and activity data (appDatabase). The logs for the application contain an abundant amount of descriptive data but only are retained for approximately three days.