Loading...
Publication
Post-mortem digital forensic artifacts of TikTok Android App
| Name: | Description: | Size: | Format: | |
|---|---|---|---|---|
| 855.75 KB | Adobe PDF |
Advisor(s)
Abstract(s)
TikTok is a social network known mostly for the creation and shar ing of short videos and for its popularity for those under 30 years
old. Although it has only appeared as Android and iOS apps in 2017,
it has gathered a large user base, being one of the most downloaded
and used app. In this paper, we study the digital forensic artifacts of
TikTok’s app that can be recovered with a post mortem analysis of
an Android phone, detailing the databases and XML with data that
might be relevant for a digital forensic practitioner. We also provide
the module tiktok.py to extract several forensic artifacts of TikTok
in a digital forensic analysis of an Android phone. The module
runs under Autopsy’s Android Analyzer environment. Although
TikTok offers a rich set of features, it is very internet-dependent,
with a large amount of its inner data kept on the cloud, and thus
not easily accessible in a post mortem analysis. Nonetheless, we
were able to recover messages exchanged through the app commu nications channels, the list of TikTok users that have interacted
with the TikTok account used at the smartphone, photos linked to
the app and in some circumstances, TikTok’s videos watched by
the smartphone’s user.
Description
Keywords
TikTok Android apps Digital forensics
Citation
Patricio Domingues, Ruben Nogueira, José Carlos Francisco, and Miguel Frade. 2020. Post-mortem digital forensic artifacts of TikTok Android App. In Proceedings of the 15th International Conference on Availability, Reliability and Security (ARES '20). Association for Computing Machinery, New York, NY, USA, Article 42, 1–8. DOI: https://doi.org/10.1145/3407023.3409203