Digital forensics study of internet messenger: Line artifact analysis in Android OS

Abstract

This paper provides a description of how to get artifacts generated by Line messenger applications such as user activities, contact information, chatting, and deleting the messages. It also provides correlation and interpretation of messages that are formed during the conversation scenario. This paper can be used as a guidance for investigators and forensics analysts in conducting investigation process. Furthermore, this paper also shows how the acquisition processes were done logically and physically. Android forensics processes were done in forensically sounds manner using three different models of smartphones and Android OS versions as the experiment objects.