Framework for the Retrieval of Social Media and Instant Messaging Evidence from Volatile Memory

Thantilage, Ranul Deelaka; Le-Khac, Nhien-An

doi:10.1109/trustcom/bigdatase.2019.00070

Cited by 16 publications

(9 citation statements)

References 19 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Although they are very popular, Tinder and Coffee Meets Bagel are by no means the only e-dating applications encountered in investigations. Future research will employ a new framework [20] to support evidence retrieval from other e-dating platforms on iPhones and Android devices.…”

Section: Discussionmentioning

confidence: 99%

Retrieving E-Dating Application Artifacts from iPhone Backups

Thantilage

Le-Khac

2020

Advances in Digital Forensics XVI

View full text Add to dashboard Cite

Criminal activities are widely facilitated by online means; so are sex crimes. Online dating, also referred to as e-dating, enables people to get in touch with potential romantic partners through digital means. Unfortunately, sex criminals also exploit online dating platforms to find victims.Several e-dating applications have been developed for computers and mobile phones, but few, if any, efforts have focused on retrieving evidence from e-dating applications. This chapter describes forensic methods for retrieving evidence from two popular e-dating applications -Tinder and Coffee Meets Bagel -by examining iPhone backups created via iTunes on Windows and Macintosh personal computers.

show abstract

Section: Discussionmentioning

confidence: 99%

Retrieving E-Dating Application Artifacts from iPhone Backups

Thantilage

Le-Khac

2020

Advances in Digital Forensics XVI

View full text Add to dashboard Cite

show abstract

“…The memory forensics process typically involves two main phases: memory acquisition and memory analysis. Some of the most common tools used for memory acquisition in the literature include DumpIt [60,83,150] and LiMe (Linux Memory Extractor) [25,81,82,134], while other acquisition tools include FTK Imager [84], Android Debug Bridge [34,38,82], and Belkasoft Ram capturer [84]. From the review of the existing literature, it is seen that DumpIt is the most common choice for memory acquisition in Windows machines.…”

Section: Memory Acquisitionmentioning

confidence: 99%

A Comprehensive Survey on Artifact Recovery from Social Media Platforms: Approaches and Future Research Directions

Gupta,

Oladimeji,

Varol

et al. 2023

Information

View full text Add to dashboard Cite

Social media applications have been ubiquitous in modern society, and their usage has grown exponentially over the years. With the widespread adoption of these platforms, social media has evolved into a significant origin of digital evidence in the domain of digital forensics. The increasing utilization of social media has caused an increase in the number of studies focusing on artifact (digital remnants of data) recovery from these platforms. As a result, we aim to present a comprehensive survey of the existing literature from the past 15 years on artifact recovery from social media applications in digital forensics. We analyze various approaches and techniques employed for artifact recovery, structuring our review on well-defined analysis focus categories, which are memory, disk, and network. By scrutinizing the available literature, we determine the trends and commonalities in existing research and further identify gaps in existing literature and areas of opportunity for future research in this field. The survey is expected to provide a valuable resource for academicians, digital forensics professionals, and researchers by enhancing their comprehension of the current state of the art in artifact recovery from social media applications. Additionally, it highlights the need for continued research to keep up with social media’s constantly evolving nature and its consequent impact on digital forensics.

show abstract

“…Despite this limitation, the framework was experimentally tested on different social media and messaging platforms and operating systems, successfully retrieving valuable data that examiners could use in an investigation, including usernames and passwords for specific social media accounts. However, Thantilage and Le Khac (2019) should expand their investigation to include mobile devices and other smart home appliances. Mittal et al (2021) have contributed to the field of data carving and memory forensics by presenting a new identification method for files, as depicted in Fig.…”

Section: Volatile Memory Evidence Retrievalmentioning

confidence: 99%

A Comprehensive Analysis of the Role of Artificial Intelligence and Machine Learning in Modern Digital Forensics and Incident Response

Dunsin,

Ghanem,

Ouazzane

et al. 2023

Preprint

View full text Add to dashboard Cite

Framework for the Retrieval of Social Media and Instant Messaging Evidence from Volatile Memory

Cited by 16 publications

References 19 publications

Retrieving E-Dating Application Artifacts from iPhone Backups

Retrieving E-Dating Application Artifacts from iPhone Backups

A Comprehensive Survey on Artifact Recovery from Social Media Platforms: Approaches and Future Research Directions

A Comprehensive Analysis of the Role of Artificial Intelligence and Machine Learning in Modern Digital Forensics and Incident Response

Contact Info

Product

Resources

About