Chat apps (or Instant Messengers) are now everywhere. There are hundreds if not thousands of apps for smartphones and PCs allowing to send messages or share files with your friends. How to forensically investigate IMs?

We will go through some popular messengers such as WhatsApp, Telegram, SnapChat and Skype. We will also cover RAM and SQLite forensics, needed to recover deleted or hidden chats.