Purdue University Graduate School
Browse

WhatsApp Forensics: Locating Artifacts in Web and Desktop Clients

Download (710.97 kB)
thesis
posted on 2019-05-14, 18:37 authored by Nicolas Villacis VukadinovicNicolas Villacis Vukadinovic
WhatsApp is the most popular instant messaging application worldwide. Since 2016, users can send and receive messages through desktop clients, either through the WhatsApp desktop application or the web client accessible from supported web browsers. The author identified a gap in the literature in terms of WhatsApp forensics for desktop and web clients. The aim of the study was to locate forensic artifacts on WhatsApp clients. These clients included the desktop application on both Windows and Mac operating systems. Chrome and Firefox web clients were also analyzed for the Windows operating system, as well as Chrome and Safari web clients on the Mac operating system. A WhatsApp log file was identified as the main artifact providing information throughout all clients analyzed. Cached profile pictures were also found, as well as history information about visited websites and ran applications.

History

Degree Type

  • Master of Science

Department

  • Computer and Information Technology

Campus location

  • West Lafayette

Advisor/Supervisor/Committee Chair

Kathryn C. Seigfried-Spellar

Additional Committee Member 2

Marcus K. Rogers

Additional Committee Member 3

Umit Karabiyik

Usage metrics

    Licence

    Exports

    RefWorks
    BibTeX
    Ref. manager
    Endnote
    DataCite
    NLM
    DC