Forensic Analysis of Instant Messenger Applications on Android Devices
This addresses the need for forensic investigators to access digital evidence on Android devices, but it is incremental as it applies existing forensic methods to new data from specific apps.
The paper tackled the problem of extracting forensic evidence from Android instant messenger applications like WhatsApp and Viber, and found that a heavy amount of valuable data, such as chat logs and media files, can be recovered from device memory.
This paper focuses on conducting forensic data analysis of 2 widely used IMs applications on Android phones WhatsApp and Viber. The tests and analysis were performed with the aim of determining what data and information can be found on the devices internal memory for instant messengers eg chat messaging logs and history send & received image or video files etc. The experiments and results show that heavy amount of potential evidences and valuable data can be found on Android phones by forensic investigators.