Abstract
<p>WhatsApp is a medium that everyone can use to interact and to share information effectively and efficiently. However, it can be misused for criminal activities. Analyzing WhatsApp' artifacts is quite challenging as the suspect may have a lot of random conversational data to be considered. This makes it difficult for the trial process to obtain digital traces that can be identified in malicious activities such as knowing who was involved when the conversation was held and the timespan. Therefore, in this research, a social media investigation of WhatsApp was carried out by acquiring data from rooted Android devices that were used as target devices for forensic activities. A python-based application is developed to show the content of the conversation, and a web-based application is presented to visualize the data using the Timeline method. Experimental results in this research display important timeline information such as information about who was involved when and what time the conversation was carried out with the suspect.</p>
Highlights
The development and the usage of social media that continue to grow are followed by the increasing number of digital devices under criminal investigation
This research converts the JSON file to the form of a timeline graph, as can be seen in Fig. 8 to support material evidence and to facilitate understanding of people who do not have a technical background in digital forensics
To get a timeline visualization of this specific data, we can filter it by enabling keywords or unique words based on the signs of terrorist activity
Summary
The development and the usage of social media that continue to grow are followed by the increasing number of digital devices under criminal investigation. This has caused major problems that affect the social media investigation process in order to present the results of fast and precise analysis and raises a challenge in social media investigative research (Pomalingo et al, 2019). One type of Social Media is WhatsApp Messenger (WA). The popularity and features provided by WA can be misused by the public for criminal purposes, for example, in terrorism crime. To fulfill all the evidence to support the trial, the forensic team must present the evidence in a clear and understandable manner for various groups, especially people who do not understand the digital forensics (Casey, 2011)
Sign-in/Register to view highlights & summary Sign-in/Register to access full text options 
Talk to us
Join us for a 30 min session where you can share your feedback and ask us any queries you have
Schedule a callMore From: International Journal on Information and Communication Technology (IJoICT)
Disclaimer: All third-party content on this website/platform is and will remain the property of their respective owners and is provided on "as is" basis without any warranties, express or implied. Use of third-party content does not indicate any affiliation, sponsorship with or endorsement by them. Any references to third-party content is to identify the corresponding services and shall be considered fair use under The CopyrightLaw.
