刑事技术2024，Vol.49Issue(2)：141-145,5.DOI:10.16467/j.1008-3650.2023.0064
不同取证系统对手机微信聊天记录恢复效果的比较分析
Comparative Study on the Effect of Different Forensics Systems in Recovering Deleted Chat Records of Mobile Phone WeChat
摘要
Abstract
In the process of cracking down on new types of network-related crimes,the collection of data from suspects'mobile phones is a key part in obtaining evidence,while in actual cases,the WeChat records in the mobile phone,which have vital clues and evidence,are usually deleted.How to quickly and efficiently restore the deleted WeChat records in the suspects'mobile phones is an urgent problem to be solved in the investigation of related cases.This paper used the latest version of the four most commonly used forensics systems to collect WeChat data twice from more than thirty models of mainstream Huawei and Apple cell phones.The data was collected directly without any operation on the mobile phone,and then the data was collected again after the old version of the operating system was upgraded.In this way,we could compare and analyze the effect of different forensic systems to restore the deleted chat records of Huawei and Apple mobile phones.This paper can provide a reference for the selection of forensic tools in the investigation of related cases.关键词
电子物证/新型涉网犯罪/取证系统/微信聊天记录/数据恢复Key words
digital forensic/new type of network-related crime/forensics system/WeChat chat records/data recovery分类
社会科学引用本文复制引用
范皓杰,黄益,于奎栋..不同取证系统对手机微信聊天记录恢复效果的比较分析[J].刑事技术,2024,49(2):141-145,5.基金项目
公安部公安理论及软科学研究计划项目(2021LL17) （2021LL17）
教育部人文社会科学研究青年基金项目(20YJC820016) （20YJC820016）
