Forensic Analysis of the Snapchat iOS App with Spectacles-Synced Artifacts

Logan VanPutte; Gokila Dorai; Andrew Clark IV; Rayna Mock; Josh Brunty

doi:10.1007/978-3-031-10078-9_4

Forensic Analysis of the Snapchat iOS App with Spectacles-Synced Artifacts

Logan VanPutte, Gokila Dorai, Andrew Clark IV, Rayna Mock, Josh Brunty

Computer & Cyber Sciences

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

2 Scopus citations

Abstract

The Spectacles wearable smart glasses device from Snapchat records snaps and videos for the Snapchat service. A Spectacles device can sync data with a paired smartphone and upload recorded content to a user’s online account. However, extracting and analyzing data from a Snapchat app is challenging due to the disappearing nature of the media. Very few commercial tools are available to obtain data from Snapchat apps. This chapter focuses on the extraction and analysis of artifacts from Snapchat and, specifically, Spectacles devices paired with Apple iPhones. A methodology is presented for forensically imaging Apple iPhones before and after critical points in the Spectacles and Snapchat pairing and syncing processes. The forensic images are examined to reveal the effects of each step of the pairing process. Several photos, videos, thumbnails and metadata files originating from Spectacles devices were obtained and tied to specific times, devices and locations. The research provides interesting insights into evidence collection from Spectacles devices paired with Apple iPhones.

Original language	English (US)
Title of host publication	Advances in Digital Forensics XVIII- 18th IFIP WG 11.9 International Conference, Revised Selected Papers
Editors	Gilbert Peterson, Sujeet Shenoi
Publisher	Springer Science and Business Media Deutschland GmbH
Pages	65-81
Number of pages	17
ISBN (Print)	9783031100772
DOIs	https://doi.org/10.1007/978-3-031-10078-9_4
State	Published - 2022
Event	18th IFIP WG 11.9 International Conference on Digital Forensics, 2022 - Virtual, Online Duration: Jan 3 2022 → Jan 4 2022

Publication series

Name	IFIP Advances in Information and Communication Technology
Volume	653 IFIP
ISSN (Print)	1868-4238
ISSN (Electronic)	1868-422X

Conference

Conference	18th IFIP WG 11.9 International Conference on Digital Forensics, 2022
City	Virtual, Online
Period	1/3/22 → 1/4/22

Keywords

evidence
iOS apps
iPhones
Snapchat
Spectacles
Wearable devices

ASJC Scopus subject areas

Information Systems
Computer Networks and Communications
Information Systems and Management

Access to Document

10.1007/978-3-031-10078-9_4

Cite this

VanPutte, L., Dorai, G., Clark IV, A., Mock, R., & Brunty, J. (2022). Forensic Analysis of the Snapchat iOS App with Spectacles-Synced Artifacts. In G. Peterson, & S. Shenoi (Eds.), Advances in Digital Forensics XVIII- 18th IFIP WG 11.9 International Conference, Revised Selected Papers (pp. 65-81). (IFIP Advances in Information and Communication Technology; Vol. 653 IFIP). Springer Science and Business Media Deutschland GmbH. https://doi.org/10.1007/978-3-031-10078-9_4

Forensic Analysis of the Snapchat iOS App with Spectacles-Synced Artifacts. / VanPutte, Logan; Dorai, Gokila; Clark IV, Andrew et al.
Advances in Digital Forensics XVIII- 18th IFIP WG 11.9 International Conference, Revised Selected Papers. ed. / Gilbert Peterson; Sujeet Shenoi. Springer Science and Business Media Deutschland GmbH, 2022. p. 65-81 (IFIP Advances in Information and Communication Technology; Vol. 653 IFIP).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

VanPutte, L, Dorai, G, Clark IV, A, Mock, R & Brunty, J 2022, Forensic Analysis of the Snapchat iOS App with Spectacles-Synced Artifacts. in G Peterson & S Shenoi (eds), Advances in Digital Forensics XVIII- 18th IFIP WG 11.9 International Conference, Revised Selected Papers. IFIP Advances in Information and Communication Technology, vol. 653 IFIP, Springer Science and Business Media Deutschland GmbH, pp. 65-81, 18th IFIP WG 11.9 International Conference on Digital Forensics, 2022, Virtual, Online, 1/3/22. https://doi.org/10.1007/978-3-031-10078-9_4

VanPutte L, Dorai G, Clark IV A, Mock R, Brunty J. Forensic Analysis of the Snapchat iOS App with Spectacles-Synced Artifacts. In Peterson G, Shenoi S, editors, Advances in Digital Forensics XVIII- 18th IFIP WG 11.9 International Conference, Revised Selected Papers. Springer Science and Business Media Deutschland GmbH. 2022. p. 65-81. (IFIP Advances in Information and Communication Technology). doi: 10.1007/978-3-031-10078-9_4

VanPutte, Logan ; Dorai, Gokila ; Clark IV, Andrew et al. / Forensic Analysis of the Snapchat iOS App with Spectacles-Synced Artifacts. Advances in Digital Forensics XVIII- 18th IFIP WG 11.9 International Conference, Revised Selected Papers. editor / Gilbert Peterson ; Sujeet Shenoi. Springer Science and Business Media Deutschland GmbH, 2022. pp. 65-81 (IFIP Advances in Information and Communication Technology).

@inproceedings{979b0a3e6fb742e9b45f2b53d490e527,

title = "Forensic Analysis of the Snapchat iOS App with Spectacles-Synced Artifacts",

abstract = "The Spectacles wearable smart glasses device from Snapchat records snaps and videos for the Snapchat service. A Spectacles device can sync data with a paired smartphone and upload recorded content to a user{\textquoteright}s online account. However, extracting and analyzing data from a Snapchat app is challenging due to the disappearing nature of the media. Very few commercial tools are available to obtain data from Snapchat apps. This chapter focuses on the extraction and analysis of artifacts from Snapchat and, specifically, Spectacles devices paired with Apple iPhones. A methodology is presented for forensically imaging Apple iPhones before and after critical points in the Spectacles and Snapchat pairing and syncing processes. The forensic images are examined to reveal the effects of each step of the pairing process. Several photos, videos, thumbnails and metadata files originating from Spectacles devices were obtained and tied to specific times, devices and locations. The research provides interesting insights into evidence collection from Spectacles devices paired with Apple iPhones.",

keywords = "evidence, iOS apps, iPhones, Snapchat, Spectacles, Wearable devices",

author = "Logan VanPutte and Gokila Dorai and {Clark IV}, Andrew and Rayna Mock and Josh Brunty",

note = "Funding Information: This research was supported by the National Science Foundation under the CyberCorps Scholarship for Service (SFS) Program Grant no. DGE 2043302. Publisher Copyright: {\textcopyright} 2022, IFIP International Federation for Information Processing.; 18th IFIP WG 11.9 International Conference on Digital Forensics, 2022 ; Conference date: 03-01-2022 Through 04-01-2022",

year = "2022",

doi = "10.1007/978-3-031-10078-9_4",

language = "English (US)",

isbn = "9783031100772",

series = "IFIP Advances in Information and Communication Technology",

publisher = "Springer Science and Business Media Deutschland GmbH",

pages = "65--81",

editor = "Gilbert Peterson and Sujeet Shenoi",

booktitle = "Advances in Digital Forensics XVIII- 18th IFIP WG 11.9 International Conference, Revised Selected Papers",

address = "Germany",

}

TY - GEN

T1 - Forensic Analysis of the Snapchat iOS App with Spectacles-Synced Artifacts

AU - VanPutte, Logan

AU - Dorai, Gokila

AU - Clark IV, Andrew

AU - Mock, Rayna

AU - Brunty, Josh

N1 - Funding Information: This research was supported by the National Science Foundation under the CyberCorps Scholarship for Service (SFS) Program Grant no. DGE 2043302. Publisher Copyright: © 2022, IFIP International Federation for Information Processing.

PY - 2022

Y1 - 2022

N2 - The Spectacles wearable smart glasses device from Snapchat records snaps and videos for the Snapchat service. A Spectacles device can sync data with a paired smartphone and upload recorded content to a user’s online account. However, extracting and analyzing data from a Snapchat app is challenging due to the disappearing nature of the media. Very few commercial tools are available to obtain data from Snapchat apps. This chapter focuses on the extraction and analysis of artifacts from Snapchat and, specifically, Spectacles devices paired with Apple iPhones. A methodology is presented for forensically imaging Apple iPhones before and after critical points in the Spectacles and Snapchat pairing and syncing processes. The forensic images are examined to reveal the effects of each step of the pairing process. Several photos, videos, thumbnails and metadata files originating from Spectacles devices were obtained and tied to specific times, devices and locations. The research provides interesting insights into evidence collection from Spectacles devices paired with Apple iPhones.

AB - The Spectacles wearable smart glasses device from Snapchat records snaps and videos for the Snapchat service. A Spectacles device can sync data with a paired smartphone and upload recorded content to a user’s online account. However, extracting and analyzing data from a Snapchat app is challenging due to the disappearing nature of the media. Very few commercial tools are available to obtain data from Snapchat apps. This chapter focuses on the extraction and analysis of artifacts from Snapchat and, specifically, Spectacles devices paired with Apple iPhones. A methodology is presented for forensically imaging Apple iPhones before and after critical points in the Spectacles and Snapchat pairing and syncing processes. The forensic images are examined to reveal the effects of each step of the pairing process. Several photos, videos, thumbnails and metadata files originating from Spectacles devices were obtained and tied to specific times, devices and locations. The research provides interesting insights into evidence collection from Spectacles devices paired with Apple iPhones.

KW - evidence

KW - iOS apps

KW - iPhones

KW - Snapchat

KW - Spectacles

KW - Wearable devices

UR - http://www.scopus.com/inward/record.url?scp=85135016497&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85135016497&partnerID=8YFLogxK

U2 - 10.1007/978-3-031-10078-9_4

DO - 10.1007/978-3-031-10078-9_4

M3 - Conference contribution

AN - SCOPUS:85135016497

SN - 9783031100772

T3 - IFIP Advances in Information and Communication Technology

SP - 65

EP - 81

BT - Advances in Digital Forensics XVIII- 18th IFIP WG 11.9 International Conference, Revised Selected Papers

A2 - Peterson, Gilbert

A2 - Shenoi, Sujeet

PB - Springer Science and Business Media Deutschland GmbH

T2 - 18th IFIP WG 11.9 International Conference on Digital Forensics, 2022

Y2 - 3 January 2022 through 4 January 2022

ER -

Forensic Analysis of the Snapchat iOS App with Spectacles-Synced Artifacts

Abstract

Publication series

Conference

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this