Research on WeChat Tampering and Forensics Based on Android System

The research of WeChat tampering technology has important practical value in improving the accuracy of WeChat forensics. This paper presents a forensics method for tampering with WeChat data on the Android system. Based on the analysis of WeChat data characteristics, SQLite database key cracking and data storage principle, this paper discusses WeChat text records, images and attachments, communication mechanism, AMR voice file tampering and tamper detection technology, and verifies it through experiments. The experiment shows that this method can effectively identify the tampered WeChat data, and can be directly applied to the forensics practice. It has high practicability and important reference value for digital forensics.