Forensic artifacts of Facebook's instant messaging service

Document Type

Conference Proceeding

Source of Publication

2011 International Conference for Internet Technology and Secured Transactions, ICITST 2011

Publication Date

12-1-2011

Abstract

This paper highlights the importance of Facebook's instant messaging service (Facebook Chat) as a potential source of evidence in an investigation. The paper discusses the process of recovering and reconstructing artifacts left by the use of Facebook Chat on a computer's hard disk. The paper describes experiments in which Facebook Chat conversations in Latin and Arabic character sets were conducted using three major web browsers, and then forensically retrieved. The results highlight how Facebook Chat artifacts of Arabic conversations can be difficult to locate with keyword search functions. The paper describes appropriate steps to overcome these difficulties. © 2011 ICITST.

ISBN

9781908320001

First Page

771

Last Page

776

Disciplines

Communication | Computer Sciences

Keywords

chat analysis, Facebook artifacts, Facebook forensics, Unicode

Scopus ID

84857471353

Indexed in Scopus

yes

Open Access

no

This document is currently not available here.

Share

COinS