![]() ![]() These applications provide not only the smart phone version but also the desktop version. ![]() Meanwhile, WeChat is the most famous chatting platform in China and the areas nearby, especially Hong Kong. ![]() With the wide use of smart phones and the internet, most people communicate with their friends using mobile social networking applications ‘Facebook and Whatsapp’. Computer forensics science is not only a science but an art. ‘ Memory Forensics is the art of analyzing computer memory (RAM) to solve digital crimes ’ defined by Michael Hale Ligh, Andrew Case and, Jamie Levy. This paper is to demonstrate a fast track of mac memory forensics via studying the evidence of a very popular social networking application ‘WeChat’. Although there are some methods: eg Volatility, Volafox, Memoryze for Mac, Mac Memory Reader, MacLockPick and Rekall, able to analyze mac memory, mac memory analysis is relatively strange. However, most of the research and trainings are focused on file system analysis. Therefore, OS X forensics, starting from Jonathan Zdziarski in 2008, became a very hot topic. Rapid growth of the usage of OS X has inspired forensic researchers to analyze devices such as the iPad, iPhone and Mac deeply.
0 Comments
Leave a Reply. |