Social Media Data in Digital Forensics Investigations

Abstract

Evidence collected from social media presents valuable information that should not be overlooked. Evidence can be captured from social media using multiple methods including searching publicly viewable content, reviewing content metadata, soliciting and investigating interactions with other users, and utilizing legal holds. After the evidence is gathered, it can be utilized in various ways. Social media evidence can be used to create a timeline of events, show intent or conspiracy, and establish connections between persons. Digital forensics investigations can be used to collect such evidence. The evidence accumulated from social media is far-reaching and widely advantageous. However, there are many legal issues that can affect the collection and ultimate legal admissibility of this evidence. Evidence must be collected using careful, correct procedures and in a manner that ensures its integrity. The ethical implications of the collection of social media evidence also plays a role in these digital forensics investigations. These issues can present adverse circumstances for cases. Nonetheless, social media offers various avenues for the collection and use of its data as evidence within a digital forensics investigation. The advantageous and disadvantageous aspects of this use are discussed in this chapter.