What is a mobile operating system?¶
The mobile operating system is the control layer that manages hardware, storage, apps, accounts, security, networks, sensors and user interaction.
It shapes what evidence exists¶
Android and iOS control encryption, permissions, app isolation, notifications, background activity and synchronisation. They determine what happens on lock, restart, update and reset. System services may create logs and network activity automatically, so not every record represents deliberate user action.
Apps are commonly sandboxed, meaning one app cannot freely read another's data. Operating-system and manufacturer rules affect where artefacts are stored and which records are available.
Version and configuration matter¶
Features, database formats and security protections change across versions, patches, manufacturers and settings. Record the exact platform and version where it can be done without harmful interaction. Those details help specialists choose acquisition methods and explain absence or differences.
Android and iPhone evidence can answer similar questions through different implementations.
Key takeaway
Record the operating system and version because this control layer determines how evidence is generated, protected and interpreted, including records created without direct user action.
