Windows instant messaging app forensics: facebook and skype as case studies
Instant messaging (IM) has changed the way people communicate with each other. However, the interactive and instant nature of these applications (apps) made them an attractive choice for malicious cyber activities such as phishing. The forensic examination of IM apps for modern Windows 8.1 (or later...
| Main Authors: | , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
Public Library of Science
2016
|
| Online Access: | http://psasir.upm.edu.my/id/eprint/53254/ http://psasir.upm.edu.my/id/eprint/53254/1/Windows%20instant%20messaging%20app%20forensics%20facebook%20and%20skype%20as%20case%20studies.pdf |
| _version_ | 1848852234939400192 |
|---|---|
| author | Teing, Yee Yang Dehghantanha, Ali Kim-Kwang, Raymond Choo Muda, Zaiton |
| author_facet | Teing, Yee Yang Dehghantanha, Ali Kim-Kwang, Raymond Choo Muda, Zaiton |
| author_sort | Teing, Yee Yang |
| building | UPM Institutional Repository |
| collection | Online Access |
| description | Instant messaging (IM) has changed the way people communicate with each other. However, the interactive and instant nature of these applications (apps) made them an attractive choice for malicious cyber activities such as phishing. The forensic examination of IM apps for modern Windows 8.1 (or later) has been largely unexplored, as the platform is relatively new. In this paper, we seek to determine the data remnants from the use of two popular Windows Store application software for instant messaging, namely Facebook and Skype on a Windows 8.1 client machine. This research contributes to an in-depth understanding of the types of terrestrial artefacts that are likely to remain after the use of instant messaging services and application software on a contemporary Windows operating system. Potential artefacts detected during the research include data relating to the installation or uninstallation of the instant messaging application software, log-in and log-off information, contact lists, conversations, and transferred files. |
| first_indexed | 2025-11-15T10:34:51Z |
| format | Article |
| id | upm-53254 |
| institution | Universiti Putra Malaysia |
| institution_category | Local University |
| language | English |
| last_indexed | 2025-11-15T10:34:51Z |
| publishDate | 2016 |
| publisher | Public Library of Science |
| recordtype | eprints |
| repository_type | Digital Repository |
| spelling | upm-532542017-09-21T04:41:13Z http://psasir.upm.edu.my/id/eprint/53254/ Windows instant messaging app forensics: facebook and skype as case studies Teing, Yee Yang Dehghantanha, Ali Kim-Kwang, Raymond Choo Muda, Zaiton Instant messaging (IM) has changed the way people communicate with each other. However, the interactive and instant nature of these applications (apps) made them an attractive choice for malicious cyber activities such as phishing. The forensic examination of IM apps for modern Windows 8.1 (or later) has been largely unexplored, as the platform is relatively new. In this paper, we seek to determine the data remnants from the use of two popular Windows Store application software for instant messaging, namely Facebook and Skype on a Windows 8.1 client machine. This research contributes to an in-depth understanding of the types of terrestrial artefacts that are likely to remain after the use of instant messaging services and application software on a contemporary Windows operating system. Potential artefacts detected during the research include data relating to the installation or uninstallation of the instant messaging application software, log-in and log-off information, contact lists, conversations, and transferred files. Public Library of Science 2016 Article PeerReviewed application/pdf en http://psasir.upm.edu.my/id/eprint/53254/1/Windows%20instant%20messaging%20app%20forensics%20facebook%20and%20skype%20as%20case%20studies.pdf Teing, Yee Yang and Dehghantanha, Ali and Kim-Kwang, Raymond Choo and Muda, Zaiton (2016) Windows instant messaging app forensics: facebook and skype as case studies. PLOS ONE, 11 (3). pp. 1-29. ISSN 1932-6203 http://www.plosone.org/home.action 10.1371/journal.pone.0150300 |
| spellingShingle | Teing, Yee Yang Dehghantanha, Ali Kim-Kwang, Raymond Choo Muda, Zaiton Windows instant messaging app forensics: facebook and skype as case studies |
| title | Windows instant messaging app forensics: facebook and skype as case studies |
| title_full | Windows instant messaging app forensics: facebook and skype as case studies |
| title_fullStr | Windows instant messaging app forensics: facebook and skype as case studies |
| title_full_unstemmed | Windows instant messaging app forensics: facebook and skype as case studies |
| title_short | Windows instant messaging app forensics: facebook and skype as case studies |
| title_sort | windows instant messaging app forensics: facebook and skype as case studies |
| url | http://psasir.upm.edu.my/id/eprint/53254/ http://psasir.upm.edu.my/id/eprint/53254/ http://psasir.upm.edu.my/id/eprint/53254/ http://psasir.upm.edu.my/id/eprint/53254/1/Windows%20instant%20messaging%20app%20forensics%20facebook%20and%20skype%20as%20case%20studies.pdf |