Taxonomy-Based Regex for Memory Analysis on Facebook
Andre Septian, Niken Dwi Wahyu Cahyani · 2024
This research aims to enhance the effectiveness of digital evidence searches within volatile memory, specifically focusing on social media forensics. Although previous studies have established a foundational framework in this domain, several limitations persist, such as the restricted amount and kind of evidence extractable from each social media platform and the potential for optimizing string searches using regular expressions (regex). In response, we developed a novel approach to creating regular expressions based on social media taxonomy and implemented parallel search algorithms for regex-based searches. As a practical implementation, we introduced the “RegTax App,” a tool specialized for digital evidence searches using regex. Based on our tests, there was an increase in the variety of artefacts retrieved using the proposed framework, as well as improvements in the speed of regex-based searches. Additionally, the search result report format was specifically structured to support forensic activities.