The Comparison Performance of Digital Forensic Tools Using Additional Root Access Options

Leonardo, Aljo and Indrayani, Rini (2022) The Comparison Performance of Digital Forensic Tools Using Additional Root Access Options. Jurnal Ilmiah Teknik Elektro Komputer dan Informatika, 7 (3). pp. 512-521.

[img] Text
15 The Comparison Performance of Digital Forensic Tools Using Additional Root Access Options.pdf

Download (674kB)

Abstract

This research used MiChat and SayHi as materials for forensic investigations using three different tools, namely MOBILedit, Magnet Axiom, and Belkasoft. These three tools will show each performance in the forensic process. We also added a rooting process as an option if data cannot be extracted optimally even when using these three applications. The result of this study shows that the cases studied with processes without root access and with root access have the aim of complementing each other in obtaining evidence. So that these two processes complement each other's shortcomings. The main contribution of this research is a recommendation of a tool based on the best performance shown during the forensic process with rooting access and without rooting access. Based on the comparison, Magnet Axiom is superior with a total of 34 items of data found without root access, while MOBILedit is 30 items and 30 items for Belkasoft. While comparison using root access, Magnet Axiom and MOBILedit are superiors with a total of 36 items found in Magnet Axiom without root access, while MOBILedit is 36 items and 33 items for Belkasoft. Based on the test results, it can be concluded that the recommended tool according to the used scenario is Magnet Axiom.

Item Type: Artikel Umum
Subjects: T Technology > TK Electrical engineering. Electronics Nuclear engineering
Divisi / Prodi: Faculty of Industrial Technology (Fakultas Teknologi Industri) > S1-Electrical Engineering (S1-Teknik Elektro)
Depositing User: M.Eng. Alfian Ma'arif
Date Deposited: 28 Jan 2022 04:22
Last Modified: 28 Jan 2022 04:22
URI: http://eprints.uad.ac.id/id/eprint/31980

Actions (login required)

View Item View Item