Testifying the digital artifacts for line application program under Mac OS X from the aspects of witness experts

摘要

Unarguably, the physical memory acquisition of contemporary computing devices has been an extremely pivotal and indispensable errand for digital forensics specialists because of its volatility of the embedded data, which was deposited from related computing resources. Nowadays, hundreds of millions of global naive or sophisticated end users exploit LINE application program (AP) as the instant messaging toolkit to conduct real-time communications including sending text messages or video clips. Unfortunately, this cutting-edge innovation has been taken advantage by the cybercrime syndicates, terrorists, or the extremists to fulfill their lucrative purposes. Hence, this research provides generic research methodologies for digital forensics experts to conduct whenever digital artifacts become mandatory in order to disclose some cybercrimes or the noncompliance of computer usage concerning LINE AP especially for the witness experts to testify in a court of law. On the other hand, this research paper pinpoints the volatile raw memory contains valuable and imperceptive digital artifacts that could reflect the interactions when LINE AP was utilized under Mac OS X. Copyright (c) 2016 John Wiley & Sons, Ltd.