Archives articles
Fall 2021, No. 2, Vol. 3 / Romanian Cyber Security Journal
Mobile Forensic Tools: An Insight into WhatsApp Key DB Extractor
George ROTARU, Gabriela TATU
mrgeorge.ro@gmail.com, gabriela.tatu@ici.ro
Due to the popularity of WhatsApp mobile application, many digital investigators are required to extract and analyze conversations stored in its database. In cases where live data forensics is performed, they must act under time pressure, retrieve useful artifacts and leave the smallest possible footprint on the suspect device. From non-rooted Android devices, WhatsApp decrypted datasets and private key can be obtained with the use of WhatsApp Key DB Extractor. The SQLite files can then be parsed and analyzed with an application chosen by the investigator.
Keywords:
WhatsApp,
Decrypt,
Extract,
Live Data Forensics,
Database
CITE THIS PAPER AS:
George ROTARU,
Gabriela TATU,
"Mobile Forensic Tools: An Insight into WhatsApp Key DB Extractor",
Romanian Cyber Security Journal,
ISSN 2668-6430,
vol. 3(2),
pp. 67-76,
2021.