Open AccessDigital Forensic Analysis of Telegram Messenger App in Android Virtual Environment
Author(s) -
Rayaz Ahmed,
Muhammad Bilal Hassan
Publication year - 2022
Publication title -
mobile and forensics
Language(s) - English
Resource type - Journals
eISSN - 2714-6685
pISSN - 2656-6257
DOI - 10.12928/mf.v4i1.5537
Subject(s) - computer science , android (operating system) , cybercrime , digital forensics , digital evidence , malware , human–computer interaction , computer security , world wide web , operating system , the internet
The paper provides an in-depth analysis of the artifacts generated by the Telegram Messenger application on Android OS which provides secure communications between individuals, groups, and channels. Since the past few years, the application went through major changes and updates and the latest version’s artifacts varied from the previous ones. Our methodology is based on the set of experiments designed to generate the artifacts from various use cases on the virtualized environment. The acquired artifacts such as messages, their location, and data structure how they relate to one another were studied and were then compared to the older versions. By correlating the artifacts of newer version with the older ones, it shows how the application have been upgraded behind the scenes and by incorporating those results can provide investigators better understanding and insight for the certain evidence in a potential cybercrime case.