Premium
An Evidence‐Based Forensic Taxonomy of Windows Phone Communication Apps
Author(s) -
Cahyani Niken Dwi Wahyu,
Martini Ben,
Choo KimKwang Raymond,
Ab Rahman Nurul Hidayah,
Ashman Helen
Publication year - 2018
Publication title -
journal of forensic sciences
Language(s) - English
Resource type - Journals
SCImago Journal Rank - 0.715
H-Index - 96
eISSN - 1556-4029
pISSN - 0022-1198
DOI - 10.1111/1556-4029.13624
Subject(s) - phone , digital forensics , digital evidence , voice over ip , computer science , computer security , forensic science , android (operating system) , world wide web , instant messaging , internet privacy , the internet , medicine , philosophy , linguistics , veterinary medicine , operating system
Communication apps can be an important source of evidence in a forensic investigation (e.g., in the investigation of a drug trafficking or terrorism case where the communications apps were used by the accused persons during the transactions or planning activities). This study presents the first evidence‐based forensic taxonomy of Windows Phone communication apps, using an existing two‐dimensional Android forensic taxonomy as a baseline. Specifically, 30 Windows Phone communication apps, including Instant Messaging ( IM ) and Voice over IP ( Vo IP ) apps, are examined. Artifacts extracted using physical acquisition are analyzed, and seven digital evidence objects of forensic interest are identified, namely: Call Log , Chats , Contacts , Locations , Installed Applications , SMS s and User Accounts . Findings from this study would help to facilitate timely and effective forensic investigations involving Windows Phone communication apps.