IMO forensics in Android and windows systems

Ababneh, Ahmad A.; Awwad, Mohammad Abu; Al-Saleh, Mohammed I.

doi:10.1109/iisa.2017.8316377

Cited by 6 publications

(7 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…A 2017 study investigated IMO chat messenger using Autopsy open-source tool. 36 The research used Autopsy and SQLite to extract messages and call data. Line (audio, video, message, conferencing application), Kakao (South Korean messaging application), and Telegram were investigated by researchers.…”

Section: Literature Reviewmentioning

confidence: 99%

See 1 more Smart Citation

Toward social media forensics through development of iOS analyzers for evidence collection and analysis

Hyder,

Arshad,

Fatima

2024

Concurrency and Computation

View full text Add to dashboard Cite

SummarySocial media usage in mobile phones has increased substantially in recent times, and they are a critically important source of a forensics investigation. In this paper, we have developed Python‐based forensic analyzers that are integrated with the open‐source tool Autopsy. The proposed analyzers find forensic artifacts from the three most widely used social media messaging applications, that is, WhatsApp, Instagram, and Facebook Messenger. This research focuses on finding forensic artifacts stored by these social media applications on an iOS device. These analyzers extract data critical for a forensic investigation such as text messages, media attachments, sender and receiver details, timestamps, contact information, and other related forensics data from the full file system image of iOS devices. These Python‐based plugins extract the required data from the social media applications' databases and present the evidential artifacts in a human‐readable format. We integrated these analyzers into the Autopsy Forensics tool and showcased the gathered evidence so that investigators are capable to analyze the extracted information effortlessly. The data integrity is maintained by converting it into readable form without permanently altering the database format. The results prove that the proposed analyzers can successfully extract and analyze forensics data at a low computational overhead.

show abstract

Section: Literature Reviewmentioning

confidence: 99%

“…Along with the message‐sending option, it is also used for file sharing. A 2017 study investigated IMO chat messenger using Autopsy open‐source tool 36 . The research used Autopsy and SQLite to extract messages and call data.…”

Section: Literature Reviewmentioning

confidence: 99%

Toward social media forensics through development of iOS analyzers for evidence collection and analysis

Hyder,

Arshad,

Fatima

2024

Concurrency and Computation

View full text Add to dashboard Cite

show abstract

“…Owing to its ability to capture a wide range of data, different researchers analyze the volatile memory of digital devices for various research purposes. The majority of the research is carried out to uncover what kinds of evidentiary artifacts related to social media applications can be found from the memory [57,59,60,76,78,159], whereas other researchers look for specific kinds of artifacts such as deleted chats [126] or encryption keys [83]. Additional research goals behind examining volatile memory for social media evidence are also to decrypt databases [129] and for the creation of tools for analysis of memory artifacts from social media applications [145,149].…”

Section: Memory Analysis Focusmentioning

confidence: 99%

A Comprehensive Survey on Artifact Recovery from Social Media Platforms: Approaches and Future Research Directions

Gupta,

Oladimeji,

Varol

et al. 2023

Information

View full text Add to dashboard Cite

Social media applications have been ubiquitous in modern society, and their usage has grown exponentially over the years. With the widespread adoption of these platforms, social media has evolved into a significant origin of digital evidence in the domain of digital forensics. The increasing utilization of social media has caused an increase in the number of studies focusing on artifact (digital remnants of data) recovery from these platforms. As a result, we aim to present a comprehensive survey of the existing literature from the past 15 years on artifact recovery from social media applications in digital forensics. We analyze various approaches and techniques employed for artifact recovery, structuring our review on well-defined analysis focus categories, which are memory, disk, and network. By scrutinizing the available literature, we determine the trends and commonalities in existing research and further identify gaps in existing literature and areas of opportunity for future research in this field. The survey is expected to provide a valuable resource for academicians, digital forensics professionals, and researchers by enhancing their comprehension of the current state of the art in artifact recovery from social media applications. Additionally, it highlights the need for continued research to keep up with social media’s constantly evolving nature and its consequent impact on digital forensics.

show abstract

“…During the last few years, researchers provided insights and challenges related to IMO Messenger forensics on multiple operation systems [15]- [18]. The analysis of IMO app demonstrated by [15] utilized on two Samsung phones (i.e., Samsung Tab 3.8 and Samsung GT-S5312), indicating that IMO app consists of six folders including-lib, cache, database, file, back_up, and no.…”

Section: A Instant Messaging Appsmentioning

confidence: 99%

“…Moreover, the authors claimed that one folder out of the six contains sub-folders that store related media files. Alternatively, researchers in [18] investigated IMO app on Windows and Android OSs based on a hypothetical scenario that comprises calls and messages. The authors extracted relevant digital forensics artifacts from the NAND flash memory for Android and RAM for Windows.…”

Section: A Instant Messaging Appsmentioning

confidence: 99%

What’s on the Horizon? An In-Depth Forensic Analysis of Android and iOS Applications

et al. 2021

View full text Add to dashboard Cite

In the digital forensics discipline, the lack of comprehensive research that addresses investigative challenges and opportunities for newer mobile Operating Systems (OSs) such as Android 10 and Apple iOS 13, keeps continuing. These two OSs are currently being widely adopted by millions of smartphones and used by millions of users, therefore, forensic investigators need to be prepared to analyze these OSs during an investigation giving consideration to mobile app updates. The current research efforts focus on the forensic analysis of individual applications of certain OSs. In this study, we conducted a detailed forensic investigation of both Android and iOS OSs to (1) elucidate their structures for investigators, (2) identify pertinent forensic artifacts, (3) highlight any privacy and security concerns in popular applications present on both OSs, and (4) validate the forensic investigation on the selected tools for reproducibility and verification purposes. This work aims to analyze 27 Android and 33 iOS mobile applications comprehensively.INDEX TERMS Android forensics, iOS forensics, investigative techniques, mobile forensics, personally identifiable information, privacy, security.

show abstract

IMO forensics in Android and windows systems

Cited by 6 publications

References 7 publications

Toward social media forensics through development of iOS analyzers for evidence collection and analysis

Toward social media forensics through development of iOS analyzers for evidence collection and analysis

A Comprehensive Survey on Artifact Recovery from Social Media Platforms: Approaches and Future Research Directions

What’s on the Horizon? An In-Depth Forensic Analysis of Android and iOS Applications

Contact Info

Product

Resources

About