Discord Server Forensics: Analysis and Extraction of Digital Evidence
Discord Server Forensics: Analysis and Extraction of Digital Evidence
复制标题
Discord 服务器取证：数字证据的分析和提取
DOI：
--
复制
发表时间：
2021
期刊：
影响因子：
--
通讯作者：
Áine MacDermott
中科院分区：
文献类型：
--
作者：
Farkhund Iqbal;Michal Motylinski;Áine MacDermott
近年来，我们可以观察到，数字取证正在应用于各种领域，因为几乎任何数据都可以成为有价值的法医证据。基于网络的调查范围之广，提供了大量信息。由于网络犯罪数量的迅速增加，特定应用程序取证的重要性比以往任何时候都要大。犯罪分子使用这款应用程序不仅是为了交流，也是为了帮助犯罪。我们注意到，游戏聊天应用程序的不和谐就是其中之一。Discorde允许用户发送文本消息以及交换图像、视频和音频文件。虽然Discorde的社区没有最流行的即时通讯应用那么大，但其用户群的稳定增长和最近的事件表明，它被犯罪分子使用。本文介绍了我们对不一致客户端伪像的数字取证分析的研究，并介绍了一个用于提取、分析和呈现来自不一致应用程序的数据的工具的实验开发。然后，这项工作提出了一种名为“DiscFor”的工具形式的解决方案，该工具可以从应用程序的本地文件和缓存存储中检索信息。
In recent years we can observe that digital forensics is being applied to a variety of domains as nearly any data can become valuable forensic evidence. The sheer scope of web-based investigations provides a vast amount of information. Due to a rapid increase in the number of cybercrimes the importance of application-specific forensics is greater than ever. Criminals use the application not only to communicate but also to facilitate crimes. It came to our attention that the gaming chat application Discord is one of them. Discord allows its users to send text messages as well as exchange image, video, and audio files. While Discord’s community is not as large as that of the most popular messaging apps the stable growth of its userbase and recent incidents indicate that it is used by criminals. This paper presents our research into the digital forensic analysis of Discord client-side artefacts and presents experimental development of a tool for extraction, analysis, and presentation of the data from Discord application. The work then proposes a solution in form of a tool, ‘DiscFor’, that can retrieve information from the application’s local files and cache storage.