Mobile Forensic Investigation for WhatsApp
Mohammed Moreb · Apress eBooks · 2022
Due to the rapid development in smartphones and their applications resulting from the development of technology and communication, and due to their ease of mobility, cost, and energy consumption, smartphones have replaced computers in many uses. The WhatsApp (WA) application is considered to be the largest messaging application around the world and an important source of information; recently they added a new algorithm that works on end-to-end encryption features, which creates a major challenge for forensic investigators and analysts. This chapter explains how to extract the encryption key from WA, encrypt databases, and extract valuable artifacts that are presented and stored in the Android and iOS systems, as a way to present and analyze artifacts extracted from the latest version of WA to discover traces of new and valuable evidence and artifacts to help investigators and forensic analysts in the investigation. This means using many tools, devices, and types of software for portable devices specialized in digital forensics, as a result of the use of free trial tools for this chapter.