Discord Server Forensics: Analysis and Extraction of Digital Evidence

In recent years we can observe that digital forensics is being applied to a variety of domains as nearly any data can become valuable forensic evidence. The sheer scope of web-based investigations provides a vast amount of information. Due to a rapid increase in the number of cybercrimes the importa...

Full description

Saved in:
Bibliographic Details
Main Authors: Iqbal, Farkhund, Motylinski, Michal, MacDermott, Aine
Format: Conference Proceeding
Language:English
Subjects:
cache analysis
Cache storage
Computer crime
Data mining
Digital forensics
discord
discord server
forensic analysis
Security
Servers
VoIP
Online Access:Request full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:In recent years we can observe that digital forensics is being applied to a variety of domains as nearly any data can become valuable forensic evidence. The sheer scope of web-based investigations provides a vast amount of information. Due to a rapid increase in the number of cybercrimes the importance of application-specific forensics is greater than ever. Criminals use the application not only to communicate but also to facilitate crimes. It came to our attention that the gaming chat application Discord is one of them. Discord allows its users to send text messages as well as exchange image, video, and audio files. While Discord's community is not as large as that of the most popular messaging apps the stable growth of its userbase and recent incidents indicate that it is used by criminals. This paper presents our research into the digital forensic analysis of Discord client-side artefacts and presents experimental development of a tool for extraction, analysis, and presentation of the data from Discord application. The work then proposes a solution in form of a tool, 'DiscFor', that can retrieve information from the application's local files and cache storage.
ISSN:2157-4960
DOI:10.1109/NTMS49979.2021.9432654