A Comprehensive Survey on Artifact Recovery from Social Media Platforms: Approaches and Future Research Directions

Abstract

Social media applications have been ubiquitous in modern society, and their usage has grown exponentially over the years. With the widespread adoption of these platforms, social media has evolved into a significant origin of digital evidence in the domain of digital forensics. The increasing utilization of social media has caused an increase in the number of studies focusing on artifact (digital remnants of data) recovery from these platforms. As a result, we aim to present a comprehensive survey of the existing literature from the past 15 years on artifact recovery from social media applications in digital forensics. We analyze various approaches and techniques employed for artifact recovery, structuring our review on well-defined analysis focus categories, which are memory, disk, and network. By scrutinizing the available literature, we determine the trends and commonalities in existing research and further identify gaps in existing literature and areas of opportunity for future research in this field. The survey is expected to provide a valuable resource for academicians, digital forensics professionals, and researchers by enhancing their comprehension of the current state of the art in artifact recovery from social media applications. Additionally, it highlights the need for continued research to keep up with social media’s constantly evolving nature and its consequent impact on digital forensics.

Graph convolution networks for social media trolls detection use deep feature extraction

“…The analysis of social media data and the information within posts, particularly text embedded in images, is gaining prominence in forensic investigations [17,18]. This process involves extracting text from images and then analyzing its content.…”

A holistic digital forensic analysis of Discord – Storage, memory, and network perspectives

“…To our understanding, only a limited number of studies have delved into digital forensic analysis specifically focusing on the Discord application with no extensive research found on android and the lack of research on iOS platforms. Additionally, there is a notable absence of research comprehensively addressing memory, network, and storage forensic analysis on both Windows and Linux operating systems which is what we are addressing in this research [20,29].…”