Repository logo
 
Publication

Digital forensic artifacts of the your phone application in Windows 10

2019Journal article Open access
Simple item page
dc.contributor.authorDomingues, Patricio Rodrigues
dc.contributor.authorFrade, Miguel
dc.contributor.authorAndrade, Luis Miguel
dc.contributor.authorSilva, João Victor
dc.date.accessioned2019-10-07T14:40:16Z
dc.date.available2019-10-07T14:40:16Z
dc.date.issued2019
dc.descriptionYPA software is available at: https://github.com/labcifpt_PT
dc.description.abstractYour Phone is a Microsoft system that comprises two applications: a smartphone app for Android 7+ smartphones and a desktop application for Windows 10/18.03+. It allows users to access their most recent smartphonestored photos/screenshots and send/receive short message service (SMS) and multimedia messaging service (MMS) within their Your Phone-linked Windows 10 personal computers. In this paper, we analyze the digital forensic artifacts created at Windows 10 personal computers whose users have the Your Phone system installed and activated. Our results show that besides the most recent 25 photos/screenshots and the content of the last 30-day of sent/received SMS/MMS, the contact database of the linked smartphone(s) is available in a accessible SQLite3 database kept at the Windows 10 system. This way, when the linked smartphone cannot be forensically analyzed, data gathered through the Your Phone artifacts may constitute a valuable digital forensic asset. Furthermore, to explore and export the main data of the Your Phone database as well as recoverable deleted data, a set of python scripts – Your Phone Analyzer (YPA) – is presented. YPA is available wrapped within an Autopsy module to assist digital practitioners to extract the main artifacts from the Your Phone system.pt_PT
dc.description.versioninfo:eu-repo/semantics/publishedVersionpt_PT
dc.identifier.citationDomingues, Patrício & Frade, Miguel & Andrade, Luis & Silva, João (2019). Digital forensic artifacts of the Your Phone application in Windows 10. Digital Investigation. 30. 10.1016/j.diin.2019.06.003.pt_PT
dc.identifier.doihttps://doi.org/10.1016/j.diin.2019.06.003
dc.identifier.issn1742-2876
dc.identifier.urihttp://hdl.handle.net/10400.8/4179
dc.language.isoengpt_PT
dc.peerreviewedyespt_PT
dc.publisherElsevierpt_PT
dc.relationUID-EEA-50008-2013 - FCT; Instituto de Telecomunicaçõespt_PT
dc.relationUID/CEC04524/2016 - CIICpt_PT
dc.relation.publisherversionhttps://www.sciencedirect.com/science/article/pii/S1742287619301239pt_PT
dc.subjectDigital forensicpt_PT
dc.subjectWindows 10pt_PT
dc.subjectSmartphonept_PT
dc.subjectPhone contactspt_PT
dc.subjectSMSpt_PT
dc.subjectPhotospt_PT
dc.titleDigital forensic artifacts of the your phone application in Windows 10pt_PT
dc.typejournal article
dspace.entity.typePublication
oaire.citation.conferencePlaceUnited Kingdompt_PT
oaire.citation.endPage42pt_PT
oaire.citation.startPage32pt_PT
oaire.citation.titleDigital Investigationpt_PT
oaire.citation.volume30pt_PT
person.familyNameDomingues
person.familyNameFrade
person.givenNamePatrício
person.givenNameMiguel
person.identifier1234758
person.identifier.ciencia-idAA15-6185-C477
person.identifier.ciencia-idA512-9B28-1CEC
person.identifier.orcid0000-0002-6207-6292
person.identifier.orcid0000-0002-4405-7696
person.identifier.scopus-author-id13411315400
person.identifier.scopus-author-id24468034000
rcaap.rightsopenAccesspt_PT
rcaap.typearticlept_PT
relation.isAuthorOfPublicationb88ada5f-0d8b-4e55-ab0a-62aa82ea1388
relation.isAuthorOfPublication95a3fa7a-d37e-45e9-9acb-44c083582fea
relation.isAuthorOfPublication.latestForDiscovery95a3fa7a-d37e-45e9-9acb-44c083582fea

Files

Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
Digital_forensic_artifacts_YourPhone_W10.pdf
Size:
759.62 KB
Format:
Adobe Portable Document Format
Description:
Download
License bundle
Now showing 1 - 1 of 1
No Thumbnail Available
Name:
license.txt
Size:
1.32 KB
Format:
Item-specific license agreed upon to submission
Description:
Download

Collections

ESTG - Artigos em revistas internacionais