Android forensics analysis: Private chat on social messenger

摘要

In this paper, we discuss remnant data from private chat, secret chat, and hidden chat in social messenger applications for Android. We explain all the artifacts which are produced by social messengers. We also provide interpretations of generated messages as well as how they relate to one another. Based on the investigation results of Android forensics and analysis in this paper, an analyst or investigator will be able to read, reconstruct, and present the chronology of the messages which have been created by the user. By using two smartphones with different brands and different Android OS versions as experimental objects, we conducted a digital investigation in a forensically sound manner.