WhatsApp Web Client Live Forensics Technique

Alberto Magno Muniz Soares

2022

Abstract

At crime scenes or when participating in arrest warrants, forensic experts may come across situations where there is a WhatsApp Web service session available on an on-site computer, which can be a very important source of data for an investigation. Some justice systems may consider video recordings or printing of conversations screens from a computer illicit or questionable evidence. This article analyses WhatsApp Web in browsers, presents a live acquisition technique that allows automated extraction of messages, attachments, contacts, and account data, even if in a disconnected computer, from WhatsApp Web sessions opened in web browsers. The technique extracts, in line with forensics procedures, digital data that can be loaded in forensic tools for analysis.

Paper Citation

in Harvard Style

Soares A. (2022). WhatsApp Web Client Live Forensics Technique. In Proceedings of the 8th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP, ISBN 978-989-758-553-1, pages 629-636. DOI: 10.5220/0011006400003120

in Bibtex Style

@conference{icissp22,
author={Alberto Magno Muniz Soares},
title={WhatsApp Web Client Live Forensics Technique},
booktitle={Proceedings of the 8th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP,},
year={2022},
pages={629-636},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0011006400003120},
isbn={978-989-758-553-1},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 8th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP,
TI - WhatsApp Web Client Live Forensics Technique
SN - 978-989-758-553-1
AU - Soares A.
PY - 2022
SP - 629
EP - 636
DO - 10.5220/0011006400003120