Forensic Analysis of Instant Messenger Applications on Android Devices

TL;DR

This study analyzes how forensic investigators can recover valuable chat logs, media, and other data from Android devices using WhatsApp and Viber, highlighting the potential evidences available for investigations.

Contribution

It provides a detailed forensic analysis of WhatsApp and Viber on Android, revealing the types of recoverable data and evidences for the first time in this context.

Findings

Significant chat logs and media files can be recovered.

Android devices store extensive forensic evidence from IM apps.

Forensic analysis can uncover valuable data for investigations.

Abstract

This paper focuses on conducting forensic data analysis of 2 widely used IMs applications on Android phones WhatsApp and Viber. The tests and analysis were performed with the aim of determining what data and information can be found on the devices internal memory for instant messengers eg chat messaging logs and history send & received image or video files etc. The experiments and results show that heavy amount of potential evidences and valuable data can be found on Android phones by forensic investigators.