Social media forens...
 
Notifications
Clear all

Social media forensics

Humera
(@humera)
New Member

I am a researcher and i am trying to figure out what kind of problems arise , after the data is recovered as a result of e-Discovery?

It would be massive data how investigators can analyse it or do they actually need to examine the data to find an information of interest?

Quote
Topic starter Posted : 21/02/2017 11:01 am
 Anonymous

Hi Humera,

What exactly do you mean? It sounds like you're looking for a bit of an overview of digital forensic procedures, which is quite a wide subject!

Were you looking for information just about social media investigation? If so, what do you want to know? There are a number of tools investigators can use, depending on the nature of the case and their legal jurisdiction, to analyse social media evidence.

ReplyQuote
Posted : 21/02/2017 1:15 pm
Humera
(@humera)
New Member

I studied few tools most of them save the extracted data in textual form or web archive. Is is possible to query information on social media without manually analyzing the data ?
Let say i have Facebook data of a person X and i want to know who became friend with X in last two months? or to which friend he communicated most in last 6 moths etc?

ReplyQuote
Topic starter Posted : 22/02/2017 9:55 am
MDCR
 MDCR
(@mdcr)
Active Member

Some social media sites allow developers to ask questions directly against users, like the Facebook Graph API. It's more limited now than it used to be. If you are in law enforcement, that opens up some ways to get the data.

Note that only asking a few questions using API functionality it does not protect you against the user changing information, adding or removing contacts, deleting posts or pictures.

ReplyQuote
Posted : 22/02/2017 12:10 pm
bntrotter
(@bntrotter)
Member

If you are acquiring data using eDiscovery methods, you would be performing logical acquisitions. You would missing a lot of unallocated or cached data which eDiscovery methods do not necessarily collect. And you would need to know what kind of data or files to collect.

If you are wanting to investigate a users social media usage, you want to perform full forensic analysis with direct physical acquisition of the machine.

ReplyQuote
Posted : 09/03/2017 7:49 pm
Viacheslav78
(@viacheslav78)
New Member
bntrotter
(@bntrotter)
Member

EDiscovery is more for document collection. Quite different from forensics.

You more than likely need Internet History tools in order to parse out Internet and social media artifacts.

Magnet IEF is really good.

ReplyQuote
Posted : 18/07/2017 11:58 pm
Share:
Share to...