Forensic methods used to extract third-party application data