Service interruption on Monday 11 July from 12:30 to 13:00: all the sites of the CCSD (HAL, Epiciences, SciencesConf, AureHAL) will be inaccessible (network hardware connection).
Skip to Main content Skip to Navigation
Conference papers

Windows 8.x Facebook and Twitter Metro App Artifacts

Abstract : The release of Windows 8.x for personal computers has increased user appetite for metro apps. Many social media metro apps are available in the Windows Store, the installation of which integrates social media platforms directly into the operating system. Metro applications enable social media platforms to be accessed without an Internet browser. The increased demand for metro apps has turned out to be a gold mine in digital forensic investigations. This is because, whenever an app is executed within an operating system, evidentiary traces of activities are left behind. Hence, it is important to locate and analyze evidentiary traces in Windows 8.x personal computer environments.This chapter focuses on the forensic analysis of two widely-used personal computer based, social media metro apps – Facebook and Twitter. Experiments were performed to determine if the activities piloted via these metro apps could be identified and reconstructed. The results reveal that, in the case of Facebook and Twitter metro apps, potential evidence and valuable data exist and can be located and analyzed by digital forensic investigators.
Document type :
Conference papers
Complete list of metadata

Cited literature [14 references]  Display  Hide  Download
Contributor : Hal Ifip Connect in order to contact the contributor
Submitted on : Wednesday, April 4, 2018 - 4:48:37 PM
Last modification on : Wednesday, April 4, 2018 - 4:55:46 PM


Files produced by the author(s)


Distributed under a Creative Commons Attribution 4.0 International License



Swasti Bhushan Deb. Windows 8.x Facebook and Twitter Metro App Artifacts. 12th IFIP International Conference on Digital Forensics (DF), Jan 2016, New Delhi, India. pp.259-279, ⟨10.1007/978-3-319-46279-0_13⟩. ⟨hal-01758693⟩



Record views


Files downloads