Social media forens...
 
Notifications
Clear all

Social media forensics

7 Posts
5 Users
0 Likes
735 Views
Humera
(@humera)
Posts: 2
New Member
Topic starter
 

I am a researcher and i am trying to figure out what kind of problems arise , after the data is recovered as a result of e-Discovery?

It would be massive data how investigators can analyse it or do they actually need to examine the data to find an information of interest?

 
Posted : 21/02/2017 11:01 am
 Anonymous
Posts: 0
 

Hi Humera,

What exactly do you mean? It sounds like you're looking for a bit of an overview of digital forensic procedures, which is quite a wide subject!

Were you looking for information just about social media investigation? If so, what do you want to know? There are a number of tools investigators can use, depending on the nature of the case and their legal jurisdiction, to analyse social media evidence.

 
Posted : 21/02/2017 1:15 pm
Humera
(@humera)
Posts: 2
New Member
Topic starter
 

I studied few tools most of them save the extracted data in textual form or web archive. Is is possible to query information on social media without manually analyzing the data ?
Let say i have Facebook data of a person X and i want to know who became friend with X in last two months? or to which friend he communicated most in last 6 moths etc?

 
Posted : 22/02/2017 9:55 am
MDCR
 MDCR
(@mdcr)
Posts: 376
Reputable Member
 

Some social media sites allow developers to ask questions directly against users, like the Facebook Graph API. It's more limited now than it used to be. If you are in law enforcement, that opens up some ways to get the data.

Note that only asking a few questions using API functionality it does not protect you against the user changing information, adding or removing contacts, deleting posts or pictures.

 
Posted : 22/02/2017 12:10 pm
bntrotter
(@bntrotter)
Posts: 63
Trusted Member
 

If you are acquiring data using eDiscovery methods, you would be performing logical acquisitions. You would missing a lot of unallocated or cached data which eDiscovery methods do not necessarily collect. And you would need to know what kind of data or files to collect.

If you are wanting to investigate a users social media usage, you want to perform full forensic analysis with direct physical acquisition of the machine.

 
Posted : 09/03/2017 7:49 pm
Viacheslav78
(@viacheslav78)
Posts: 15
Active Member
 

I am a researcher and i am trying to figure out what kind of problems arise , after the data is recovered as a result of e-Discovery?

It would be massive data how investigators can analyse it or do they actually need to examine the data to find an information of interest?

https://arxiv.org/pdf/1706.08062.pdf
http//commons.erau.edu/cgi/viewcontent.cgi?article=1430&context=jdfsl
https://www.sba-research.org/wp-content/uploads/publications/socialForensics_preprint.pdf
http//www.iosrjournals.org/iosr-jce/papers/Conf.17003/Volume-2/8.%2039-44.pdf?id=7557
http//ferryas.lecturer.pens.ac.id/NetSa_Papers/Network%20forensic%20frameworks%20Survey%20and%20research%20challenges.pdf
http//uir.unisa.ac.za/bitstream/handle/10500/14383/dissertation_gillespie_rt.pdf?sequence=1
http//cs.lewisu.edu/mathcs/msisprojects/papers/kevinswartz.pdf
http//www.academia.edu/10726810/Social_Media_Forensics_on_Mobile_Devices
http//www.cybercrimejournal.com/Brown2015vol9issue1.pdf
http//scholarworks.rit.edu/cgi/viewcontent.cgi?article=1974&context=theses

 
Posted : 17/07/2017 3:31 pm
bntrotter
(@bntrotter)
Posts: 63
Trusted Member
 

EDiscovery is more for document collection. Quite different from forensics.

You more than likely need Internet History tools in order to parse out Internet and social media artifacts.

Magnet IEF is really good.

 
Posted : 18/07/2017 11:58 pm
Share:
Share to...