Comparative Analysis of Forensic Software on Android-based MiChat using ACPO and DFRWS Framework

Instant Messaging (IM) is a popular and widely used communication application. MiChat is a multi-platform instant chat service with several features that can attract various segments of the population to use it as a tool for committing cybercrimes. A forensic framework and several forensic tools are needed to carry out physical evidence investigation procedures. This study focuses on analyzing and comparing the forensic tools used during the research, based on defined digital evidence parameters and applying a specific mobile forensic framework. The results show that Final Mobile Forensic has the highest ability to obtain digital evidence and can recover deleted data, while Oxygen Forensic Detective has advantages in terms of audio, images, and video but cannot recover data. The best framework is DFRWS, which has the most complete stages so that it can support the investigation process. The best digital evidence is text chat and contacts, which can be used to support valid legal claims.