Mobile Forensic on Android-based IMO Messenger Services using Digital Forensic Research Workshop (DFRWS) Method
Afif Nur Ichsan, Imam Riadi · International Journal of Computer Applications · 2021
The development of mobile device technology is very rapid in this global era, This has an impact on the increase in cybercrime such as narcotics transactions using the Instant Messenger application.IMO Messenger is an Instant Messenger application that can be used as a medium for crime because it has increased the number of users every year.This study used three stages of the Digital Forensics Research Workshop (DFRWS) method, namely identification, preservation, collection.This study uses two smartphones with root and non-root conditions that have the IMO application installed.The case used in this research is narcotics transactions based on previous case scenarios.Evidence from the criminal case will be acquired using four forensic tools, namely, MOBILedit forensic express, DB Browser for SQLite, AccessData FTK Imager, and Belkasoft evidence center.This research produces digital evidence in the form of chat files, images, audio, video, perpetrator's accounts, and chat times that have been deleted from a smartphone device in root condition.Calculation of the percentage index number from the evidence obtained on a smartphone with root conditions using MOBILedit forensic express tools at 100%, DB Browser for SQLite at 33.33%, AccessData FTK Imager at 33.33% and Belkasoft evidence center at 83.33%, smartphones with non-root conditions, no digital evidence was found.