
To address this challenge, there is a pressing need for more effective on-scene capabilities to detect and preserve encryption prior to pulling the plug. The practice of shutting down an evidential computer is not an acceptable technique when dealing with FDE or even volume encryption because it may result in all data on the device being rendered inaccessible for forensic examination. The increasing use of full disk encryption (FDE) can significantly hamper digital investigations, potentially preventing access to all digital evidence in a case. Tests of anti-forensics measures will also be reported. In addition, some basic scripts will be utilised to demonstrate the potential for developing fully fledged forensics tools applicable to other platforms. This paper reports the extraction and interpretation of important artefacts found in the recorded flight logs on both the internal memory of the UAV and the controlling application, as well as analysis of media, logs and other important files for identifying artefacts. The challenges that drones present include the need to interpret flight data and tackling the multi-platform nature of drone systems. The need for forensic research to successfully analyse captured drones is rising. It is for this reason that drones are also being utilised as deadly weapons in conflict areas. From a criminological perspective, drones are an ideal method of smuggling, physically removing the operator from the act. This is due to the increasing availability of drones and their capabilities of travelling large distances and taking high resolution photographs and videos. During the data acquisition process, we conducted physical and logical forensic acquisitions of an Android device which led to a breakthrough discovery of a SQLite file called Write-Ahead-Log (WAL) which contains the application’s latest messages, including deleted (allegedly) messages.ĭrones or UAVs (Unmanned Air Vehicles) have a great potential to cause concerns over privacy, trespassing and safety. During the course of this research, we tested and validated the digital forensic methodology and compared the investigation results with forensically sound commercial tools. This feature is a great addition to the overall usability of IMAs, however, it is also crucial to update the digital forensic investigation techniques and test the capability of commercial forensic tools in recovering forensic evidence when a new technology has been introduced. This paper examines the forensic artifacts of the WhatsApp’s ‘delete for everyone’ feature.

Therefore, there is a need to revisit the investigation process and the structure of such updated features to be able to create a comprehensive digital forensic technique. Some newly added features on WhatsApp, such as ‘delete for everyone’, giving the users the ability to delete messages from both ends (sender and receiver), have resulted in complicating the cybercrime investigation process.

With the rapidly increased use of WhatsApp application, it is plausible to speculate that WhatsApp became a potential source of threat and/or cybercrime. Proliferation of digital platforms specifically Instant Messaging Applications (IMAs), have introduced new challenges to digital forensic investigations.

While different UAV systems can vary in their operations owing to their capabilities, some generic methods will be used in analysis and extraction of the data and then results will be compared between models.

This paper covers the use of open source tools and the development of some basic scripts to aid forensic analysis of two popular drones - the DJI Phantom 3 Professional and AR Drone 2 with the aim of reconstructing the actions taken by these drones, identification of owners or operators, and extraction of data from associated mobile devices. Due to the use of custom electronic flight systems within different drone devices, to date appropriate forensic tools have not been developed. This creates a need for forensic analysis into devices used for drones. With the increase in demand and subsequent availability, there has also been a rise in drones used in crime. The potential applications of drones range from simple leisure and recreational purposes to photography, transport, surveying, security, the list goes on. Recent technological advancements have made drones, also known as UAVs (Unmanned Air Vehicles), more accessible to the public, causing an increase in their popularity.
