Search

Instant Messaging (IM) is a popular and widely used communication application. MiChat is a multi-platform instant chat service with several features that can attract various segments of the population to use it as a tool for committing cybercrimes. A forensic framework and several forensic tools are needed to carry out physical evidence investigation procedures. This study focuses on analyzing and comparing the forensic tools used during the research, based on defined digital evidence parameters and applying a specific mobile forensic framework. The results show that Final Mobile Forensic has the highest ability to obtain digital evidence and can recover deleted data, while Oxygen Forensic Detective has advantages in terms of audio, images, and video but cannot recover data. The best framework is DFRWS, which has the most complete stages so that it can support the investigation process. The best digital evidence is text chat and contacts, which can be used to support valid legal claims.

The advancement of new technology is quickening. Because of the features and applications available on mobile devices, smartphones are gradually taking over the role of computers. One of them is a multi-platform instant messaging application with various features that can bring people together, but the negative aspect is that it is used to commit digital crimes. Digital evidence is required in the investigation of digital crimes, In order to obtain digital evidence, a set of forensic tools is required to carry out the forensic process of physical evidence. The goal of this research is to describe and contrast the forensic process. These tools are currently based on digital evidence obtained through the stages of the Digital Forensic Research Workshop. MEF, DB4S, OFD, and FMF are the forensic tools used in this study. According to the findings, FMF has the highest extraction capability for obtaining digital evidence, OFD has advantages in terms of data acquisition features, and MFE has advantages in identification, physical evidence preservation, and cloning. [ABSTRACT FROM AUTHOR]

Copyright of Journal of Social & Technology / Jurnal Sosial dan Teknologi (SOSTECH) is the property of Green Publisher and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)