Smartphone users spend a substantial amount of time in browsing, emailing, and messaging through different social networking apps. The use of social networking apps on smartphones has become a dominating part of daily lives. This momentous usage has also resulted in a huge spike in cybercrimes such as social harassing, abusive messages, vicious threats, broadcasting of suicidal actions, and live coverage of violent attacks. Many of such crimes are carried out through social networking apps; therefore, the forensic analysis of allegedly involved digital devices in crime scenes and social apps installed on them can be helpful in resolving criminal investigations. This research is aimed at performing forensic investigation of five social networking apps, i.e., Instagram, LINE, Whisper, WeChat, and Wickr on Android smart phones. The essential motivation behind the examination and tests is to find whether the data resides within the internal storage of the device or not after using these social networking apps. Data extraction and analysis are carried out using three tools, i.e., Magnet AXIOM, XRY, and Autopsy. From the results of these experiments, a considerable amount of essential data was successfully extracted from the examined smartphone. This useful data can easily be recovered by forensic analysts for future examination of any crime situation. Finally, we analyzed the tools on the basis of their ability to extract digital evidences from the device and their performance are examined with respect to NIST standards.

中文翻译：

---

Android智能手机上社交网络应用的取证分析

智能手机用户花费大量时间通过不同的社交网络应用程序浏览、发送电子邮件和发送消息。在智能手机上使用社交网络应用程序已成为日常生活的主要部分。这种重要的使用也导致了网络犯罪的激增，例如社会骚扰、辱骂信息、恶意威胁、自杀行为广播和暴力袭击的现场报道。许多此类犯罪是通过社交网络应用程序进行的；因此，对涉嫌涉及犯罪现场的数字设备和安装在其上的社交应用程序进行取证分析有助于解决刑事调查。本研究旨在对 Android 智能手机上的 Instagram、LINE、Whisper、微信和 Wickr 五个社交网络应用程序进行取证调查。检查和测试背后的基本动机是在使用这些社交网络应用程序后，确定数据是否驻留在设备的内部存储空间中。 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 数据提取和分析使用三种工具进行，即 Magnet AXIOM、XRY 和 Autopsy。从这些实验的结果中，成功地从被检查的智能手机中提取了大量的基本数据。法医分析师可以轻松恢复这些有用的数据，以便将来检查任何犯罪情况。最后，我们分析了这些工具从设备中提取数字证据的能力，并根据 NIST 标准检查了它们的性能。