"A forensic analysis of streaming platforms on Android OS" (FSI:DI, vol. 44)

https://doi.org/10.1016/j.fsidi.2022.301485

Authors:
Sean Mckeown
Julián García Murais
Douglas Levick

• Streamed video forensics
• Android application forensics
• Cached video forensics

#DFIR #4n6 #AndroidForensics

6 hours read + notes 🏆

Covering *Facebook Live, *Reddit streaming, *Instagram live, *Twitch, *YouTube live and *Periscope. (See 3.2 and Table 2 content)

Tools: Sleuthkit Autopsy; Magnet
AXIOM

Well-defined forensic questions, print 👇
👏👏👏

Extracting user data from cloud of a MS personal account. Elcomsoft Phone Breaker has an intuitive and esay going interface. 2FA passed at the first attempt. EPR returns SMS, Calls, Skype, Notes, Web/History, Contacts, OneDrive/Vault, even Locations.

PS: I'm going to repeat this test a few more times. I didn't notice if it is previously shown the number of files or the volume of OneDrive/Vault before starting the acquistion. My bad. I chose not to collect OneDrive/Vault at first. 🏆

#DFIR #PericiaDigital #PeríciaForense