Mobile devices, which are used by almost everyone for both private and professional intention, have become an indispensable part of people’s life. Today, one of the most important and primary features for smartphone users is that they communicate with each other through social media applications. Used by billions of people, these applications provide a lot of personal information about its user. Mobile device forensic is a significant subset of digital forensic. It is concerned with the acquisition and analysis of digital evidence on mobile devices. Commonly used by many people for messaging, calling and sharing photos/videos, WhatsApp Messenger contains several evidences for mobile forensic and is an important data mine for forensic professionals. In this study, WhatsApp Messenger, which is the most widely used instant messaging application in the world, was examined in terms of digital forensic by using popular forensic tools Cellebrite UFED and Magnet AXIOM on iPhone 5s (A1457) model smartphone with iOS operating system. Sent, received and deleted data (messages, images, videos, calls, etc.) obtained from WhatsApp Messenger application’s files, databases and logs in the internal memory of the smartphone was analysed. The acquired results were given comparatively with details. The results and comparison of current commercial forensic software will help forensic experts in subsequent data analysis.

Mobile Device Forensic, iOS Forensic, Instant Messenger Applications, WhatsApp Messenger, Forensic Tools

[1] W. Jansen, R. Ayers, “Guidelines on cell phone forensics”, NIST Special Publication 800-101, Vol.1, No.1, pp.1-104, 2007.
[2] M. G. Noblett, M. M. Pollitt, L. A. Presley, “Recovering and examining computer forensic evidence”, Forensic Science Communications, Vol.2, Issue.4, 2000.
[3] G. Palmer, “A road map for digital forensic research”, In the First Digital Forensic Research Workshop, New York, USA, pp.27-30, 2001.
[4] E. Casey, G. Palmer, “The investigative process”, Digital Evidence and Computer Crime, Elsevier Academic Press, Amsterdam, 2004.
[5] Bhanushree V.K, Minavathi, “Cloud packets forensics through NIDS and NIPS with honeypot”, International Journal of Computer Sciences and Engineering, Vol.8, Issue.4, pp.119-122, 2020.
[6] NIST Cloud Computing Forensic Science Working Group, “NIST cloud computing forensic science challenges”, Draft NISTIR 8006, 2014.
[7] R. Ayers, S. Brothers, W. Jansen, “Guidelines on mobile device forensics”, NIST Special Publication 800-101 Revision 1, Vol.1, No.1, pp.1-85, 2014.
[8] N. Gandhewar, R. Sheikh, “Google Android: An emerging software platform for mobile devices”, International Journal on Computer Science and Engineering, Vol.1, No.1, pp.12-17, 2010.
[9] M. Nosrati, R. Karimi, H. A. Hasanvand, “Mobile computing: principles, devices and operating systems”, World Applied Programming, Vol.2, Issue.7, pp.399-408, 2012.
[10] C. Sgaras, M. Kechadi, N. A. Le-Khac, “Forensics acquisition and analysis of instant messaging and VoIP applications”, In the Computational Forensics, Cham, Switzerland, pp.188-199, 2016.
[11] D. Walnycky, I. Baggili, A. Marrington, J. Moore, F. Breitinger, “Network and device forensic analysis of android social-messaging applications”, Digital Investigation, Vol.14, pp.S77-S84, 2015.
[12] C. Anglano, “Forensic analysis of WhatsApp Messenger on Android smartphones”, Digital Investigation, Vol.11, Issue.3, pp.201-213, 2014.
[13] A. Mahajan, M. S. Dahiya, H. P. Sanghvi, “Forensic analysis of instant messenger applications on android devices”, International Journal of Computer Applications, Vol.68, No.8, pp.38-44, 2013.
[14] Y. C. Tso, S. J. Wang, C. T. Huang, W. J. Wang, “iPhone social networking for evidence investigations using iTunes forensics” In the Proceedings of the 6th International Conference on Ubiquitous information management and Communication, New York, USA, pp.1-7, 2012
[15] Facebook, “Facebook to acquire whatsapp”, Available at: https://newsroom.fb.com/news/2014/02/facebook-to-acquire-whatsapp/ [Accessed on 24 August 2020]
[16] WhatsApp, “About WhatsApp”, Available at: https://www.whatsapp.com/about/?lang=en [Accessed on 24 August 2020]
[17] Statista, “Most popular global mobile messenger apps as of July 2020, based on number of monthly active users (in millions)”, Available at: https://www.statista.com/statistics/258749/most-popular-global-mobile-messenger-apps/ [Accessed on 24 August 2020]
[18] My Assignment Help, “Business performance of iphone 7”, Available at: https://myassignmenthelp.com/free-samples/business-performance-of-iphone-7?cv=1&access-library-email= [Accessed on 24 August 2020]
[19] Statcounter, “Mobile operating system market share worldwide”, Available at: https://gs.statcounter.com/os-market-share/mobile/worldwide/#monthly-202007-202007-bar [Accessed on 24 August 2020]
[20] Statista, “Number of apps available in leading app stores as of 1st quarter 2020”, Available at: https://www.statista.com/statistics/276623/number-of-apps-available-in-leading-app-stores/ [Accessed on 24 August 2020]
[21] Independent, “Apple reveals its best and most popular iPhone apps in 2019” Available at: https://www.independent.co.uk/life-style/gadgets-and tech/news/iphone-best-apps-2019-apple-app-store-most-popular-a9230706.html [Accessed on 24 August 2020]
[22] Wikipedia, “Cellebrite”, Available at: https://en.wikipedia.org/wiki/Cellebrite [Accessed on 24 August 2020]
[23] Magnet AXIOM, “The evolution of IEF”, Available at: https://irp-cdn.multiscreensite.com/ad68eab3/files/uploaded/MagnetAXIOM_e-brochure.pdf [Accessed on 24 August 2020]