Implementation of ACPO Framework for Digital Evidence Acquisition in Smartphones

Abstract

A forensic investigator or analyst should implement an appropriate digital forensic framework to acquire valid digital evidence to be presented at court. Choosing an unsuitable digital forensic framework with the investigation process may lead to failure at acquiring or maintaining complete digital evidence. Missing a step or turning a certain step into another irrelevant step may lead to unclear results and invalid conclusions. Digital evidence extracted from risky electronic evidence cannot be accepted by the court. Accordingly, a forensic investigator or forensic analyst should refer to a structuralized standard structure to perform well.Several internal digital forensic frameworks are available, one of which is the Good Practice Guide for Computer-based Electronic Evidence [1], an English issuance by ACPO (Association of Chief Police Officers) in cooperation with 7Safe. The digital forensic framework is commonly called the digital forensic framework from ACPO or the ACPO Framework. This research brings into focus the analysis of the percentage of success rate for using the ACPO digital forensic framework or the ACPO Framework in comparison with another digital forensic framework, i.e., NIST Framework. This research is also aimed at examining the performance of a mobile forensic tool, i.e., Cellebrite’s UFED Touch2 in comparison with another mobile forensic tool for digital evidence acquisition in smartphones.The research objects were smartphones containing deleted WhatsApp messages. This research successfully implemented the ACPO Framework for digital evidence acquisition in smartphones using Cellebrite’s UFED Touch2 as the mobile forensic tool.

Forensic Web Analysis on The Latest Version of Whatsapp Browser

“…The analysis phase aims to gather relevant information and gain an understanding of the information security incident that occurred. This phase includes developing and testing hypotheses, as well as identifying the modus operandi of the perpetrator (Jafri et al, 2022).…”

Analisis Forensik Aplikasi Discord Pada Android Berdasarkan Acpo Framework

“…Penelitian akan menggunakan ACPO sebagai framework analisis forensik untuk mengembangkan teknik yang relevan untuk penanganan kasus pada platform komunikasi ini. Dalam penelitian (Jafri et al, 2022) menunjukkan bahwa framework ACPO menunjukkan persentase kesuksesan dalam mendapatkan bukti digital sebesar 66,6% dibandingkan dengan framework NIST yang memiliki persentase sebesar 57,1%. Kemudian framework ACPO juga dipakai oleh beberapa peneliti dalam melakukan forensik mobile seperti penelitian (Ermin et al, 2023) melakukan forensik aplikasi DANA, penelitian (Riadi et al, 2023) melakukan forensik aplikasi MiChat, dan penelitian (Safitri et al, 2023) melakukan forensik pada aplikasi IMO instant messaging.…”