Abstract:Microsoft released a new communication platform, Microsoft Teams, in 2017. Due in part to COVID-19, the popularity of communication platforms, like Microsoft Teams, increased exponentially. Given its user base and increased popularity, it seems likely that digital forensic investigators will encounter cases where Microsoft Teams is a relevant component. However, because Microsoft Teams is a relatively new application, there is limited forensic research on the application particularly focusing on mobile operating systems. To address this gap, an analysis of data stored at rest by Microsoft Teams was conducted on the Windows 10 operating system as well as on Android and Apple iOS mobile operating systems. Basic functionalities, such as messaging, sharing files, participating in video conferences, and other functionalities that Teams provides, were performed in an isolated testing environment. Cellebrite UFED Physical Analyzer and Magnet AXIOM Examine tools were used to analyze the mobile devices and the Windows device, respectively. Manual or non-automated investigation recovered, at least partially, the majority of artifacts across all three operating systems. In this study, a total of 77.6% of the populated artifacts were partially or fully recovered in the manual investigation. On the other hand, forensic tools used did not automatically recover many of the artifacts found with the manual investigation. Only 13.8% of artifacts were partially or fully recovered by the forensic tools across all three devices. These discovered artifacts and the results of the investigations are presented in order to aid digital forensic investigations.

Toward social media forensics through development of iOS analyzers for evidence collection and analysis

Forensic Investigation of Social Media and Instant Messaging Services in Firefox OS: Facebook, Twitter, Google+, Telegram, OpenWapp and Line as Case Studies

Forensic Taxonomy of Popular Android mHealth Apps

A Multi-Layer Semantic Approach for Digital Forensics Automation for Online Social Networks

Forensic analysis of TikTok application to seek digital artifacts on Android smartphone

Forensics Analysis of Android Mobile VoIP Apps

Digital Forensics Design of IOS Operating System

A Forensic Analysis of Video Streaming Activities on Android Applications

Network Traffic Forensics on Firefox Mobile OS: Facebook, Twitter and Telegram as Case Studies

Forensic investigation of small-scale digital devices: a futuristic view

We are meeting on Microsoft Teams: Forensic analysis in Windows, Android, and iOS operating systems

The Social Networking Investigation of Metadata of Forensic Artifacts of A Typical Wechat Session under Windows

Forensic analysis of iOS binary cookie files

Toward a new tool to extract the Evidence from a Memory Card of Mobile phones

Recovering Residual Forensic Data from Smartphone Interactions with Cloud Storage Providers

Forensic Analysis of Third Party Location Applications in Android and iOS

Forensic investigation of Cisco WebEx desktop client, web, and Android smartphone applications

Research on Digital Forensics of Smart Devices

Mobile Cloud Forensics: An Analysis of Seven Popular Android Apps

A Visualization Approach to Analyze Android Smartphone Data

Forensic Analysis of Fitbit Versa: Android vs iOS