Establishment of forensic analysis model in the investigation of mobile chat applications

The widespread use of mobile chat applications, the inadequacy of countries in detecting communication with existing systems and illuminating crimes necessitate the examination of mobile devices. Some difficulties arise in these studies. The inspection software used partially overcomes these difficulties but cannot bring any data in cases where it cannot overcome and identify. Since the data available as a result of such an examination is not defined by the examination software, the examinations are incomplete and do not provide any benefit to the subject of the investigation. In this thesis study, the desired examinations were carried out on the images of the mobile devices that can be imaged and the operating systems created in virtual machines in accordance with the operating systems of the mobile devices that cannot be imaged. In the first stage, the existing review software and mobile chat applications were analyzed through the scenarios created for each chat application. As a result, a comparison table was created in line with this information obtained from the chat applications examined, and a forensic analysis model of mobile chat applications was put forward with manual methods.