Smartphones have increasingly become a part of our daily life. Further, in recent years, we have witnessed a rapid increase in the use of social networking applications as an online communication method on mobile devices. One of the most popular apps which everybody seems to be using is WhatsApp messenger. People share a huge amount of data, including their personal and sensitive information using this particular App. However, as with any other App, WhatsApp leaves a significant trail of artifacts on the mobile device on which it is used. This information is stored at many locations on the phone. The same can be used by any investigating forensic agency to reconstruct the event timeline of WhatsApp.
This paper attempts to analyze the forensic artifacts left by WhatsApp in one of its key artifact file called “WhatsApp.log”.
WhatsApp, WhatsApp Log, Forensic Analysis of WhatsApp