{"id":4085,"date":"2018-05-10T11:19:48","date_gmt":"2018-05-10T15:19:48","guid":{"rendered":"https:\/\/www.digitalforensics.com\/blog\/?p=4085"},"modified":"2025-02-24T17:36:54","modified_gmt":"2025-02-24T17:36:54","slug":"analyzing-instant-messengers-with-belkasoft","status":"publish","type":"post","link":"https:\/\/www.digitalforensics.com\/blog\/software\/analyzing-instant-messengers-with-belkasoft\/","title":{"rendered":"Analyzing Instant Messengers with Belkasoft"},"content":{"rendered":"

Nowadays, the basic exchange of information is carried out through Instant Messengers by using social networks. Some social networks have their own mobile apps which functionality can be compared with that of IM Messengers.<\/p>\n

<\/p>\n

Where is History of Instant Messengers stored?<\/em><\/p>\n

Some Instant Messengers store history locally (on a computer or mobile device) such as Skype, WhatsApp, etc.<\/p>\n

Some Instant Messengers store history partly locally, partly in the cloud such as Telegram, etc. The amount of information stored locally can be different. For example, it can be account info, cache, chats, calls or maybe just account info, cache.<\/p>\n

 <\/p>\n

Where can I find the history of Instant Messengers?<\/em><\/p>\n

1) Physical dumps of mobile devices.<\/p>\n

2) File systems of mobile devices.<\/p>\n

3) Backups (history of Instant Messengers can be present in backups completely or \u00a0partially, depending on the security settings of the operating system of the mobile device). Backups can be detected on computers (or laptops), clouds: Google Cloud, iCloud, etc. Backups can be “standard” (made by using ADB for Android devices, iTunes for Apple devices), and “non-standard”, for example Smart Switch backup (backup made by the proprietary Smart Switch utility (Samsung), or a backup made by the program DrFone (Wondershare) Practice shows that owners of mobile devices do not always realize that when a mobile device is connected to a computer, backup can be created automatically. Therefore, the owner of the device may not take measures to destroy such backups.<\/p>\n

4) Hard drives.<\/p>\n

5) Memory cards.<\/p>\n

6) RAM memory dumps.<\/p>\n

7) For Instant Messengers such as Telegram, data can be extracted from their Clouds.<\/p>\n

 <\/p>\n

 <\/p>\n

Belkasoft Features<\/em><\/p>\n

Belkasoft can analyze and extract History of\u00a0Instant Messengers from mobile devices, PCs, laptops, clouds.<\/p>\n

\"\"<\/p>\n

Supported Operating Systems:<\/p>\n