| Abstract: | We present the forensic analysis of the artifacts generated on Android smartphones by Instant Messaging applications, like Telegram Messenger and ChatSecure applications. Telegram Messenger is the official client for the Telegram instant messaging platform, which provides various forms of secure individual and group communication, by means of which both textual and non-textual messages can be exchanged among users, as well as voice calls. ChatSecure is a secure instant messaging application that provides strong encryption for transmitted and locally-stored data to ensure the privacy of its users.
Specifically, in this technical report, we focus on the ChatSecure application as a case study, and we describe how to concretely configure and use the various tools that we rely upon to create and run an Android Virtual Device (AVD), and to carry out the analysis of its persistent and volatile memory. |
