Which of the following is a common type of data extracted from mobile devices?

Mobile devices, such as smartphones and tablets, store a wide array of personal and operational data that is frequently extracted during forensic investigations. Contacts, messages, call logs, and application data represent core information that is essential for understanding user interactions, communications, and activities on the device.

Contacts provide valuable insights into the social network and relationships of the user, while messages and call logs document communication patterns and can also reveal crucial timelines pertinent to an investigation. Application data can encompass anything from app usage patterns to in-app interactions, which can provide context and content relevant to both user behavior and potential criminal activity.

The other types of data mentioned do not typically represent core elements extracted from mobile devices. For instance, source code files are more associated with software development rather than general mobile user data. Documents and presentations, while sometimes found on mobile devices, are not as commonly categorized as extractions in forensic investigations. Similarly, system installation files pertain more to the operating system rather than user-generated content, making them less relevant in the context of typical data extraction methods focused on user interaction and personal information.