Scholarlink

Traditionally, the file sharing was primarily facilitated through email. However, with recent development, modern instant messaging applications and their web versions have become the predominant means for sharing and downloading files of various formats. This shift has also corresponded to a notable increase in cybercrime, highlighting the critical importance of storing and analyzing digital evidence. Given the widespread use of the Windows operating system and its supported NTFS file system, understanding and interpreting its artifacts has become pivotal. The study includes the remnants for five web-based chat applications (WhatsApp Web, Facebook Messenger, Telegram, Slack, and Discord) accessed via popular web browsers, namely Mozilla Firefox, Microsoft Edge, Google Chrome, Opera, and Brave installed on Windows 10 desktop operating system. These essential components have provided the focal point for our comparative analysis of the $MFT entries associated with different file formats from diverse instant messaging applications operating on distinct web browsers.

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

Re-acquiring Shared Files Artifacts from Web-Based Chat Applications in NTFS

  • 会议论文

  • 发表日期：

    2026年

查看全文
  • Salagrama Aditya,
  • Nitesh K. Bharadwaj,
  • Bhupendra Singh

摘要

Traditionally, the file sharing was primarily facilitated through email. However, with recent development, modern instant messaging applications and their web versions have become the predominant means for sharing and downloading files of various formats. This shift has also corresponded to a notable increase in cybercrime, highlighting the critical importance of storing and analyzing digital evidence. Given the widespread use of the Windows operating system and its supported NTFS file system, understanding and interpreting its artifacts has become pivotal. The study includes the remnants for five web-based chat applications (WhatsApp Web, Facebook Messenger, Telegram, Slack, and Discord) accessed via popular web browsers, namely Mozilla Firefox, Microsoft Edge, Google Chrome, Opera, and Brave installed on Windows 10 desktop operating system. These essential components have provided the focal point for our comparative analysis of the $MFT entries associated with different file formats from diverse instant messaging applications operating on distinct web browsers.