Android Forensics Lab: Installing and Exploring Andriller CE on Windows

In this digital forensics lab, we walk through how to install and explore Andriller CE on a Windows computer. This activity introduces students to an Android mobile forensics tool used to examine device-related utilities and investigator options through a graphical interface. Students learn how to launch Andriller CE, configure an output folder, review the major tool categories, and document the available utilities found under menus such as Decoder, Apps Utils, Lockscreens, Tools, and ADB. The activity also includes saving the application log and recording observations in examiner notes as part of the forensic workflow. This is a great hands-on exercise for students learning mobile device forensics, forensic tool familiarization, Android investigation concepts, and how to document tool capabilities before conducting deeper analysis. Disclaimer: This video is for educational purposes only. This lab is based on material from Guide to Computer Forensics and Investigations, 7th Edition — Cengage. The material is used here for instructional and academic discussion. All credit for the original source material belongs to the respective author(s) and publisher. This video is intended only to support authorized learning in digital forensics, cybersecurity, and mobile forensics education.