Forensic Analysis of WhatsApp, Instagram, and Telegram on Virtual Android Device

Social media platforms such as WhatsApp, Telegram, and Instagram have rapidly grown in the daily lives of modern society, with significant impacts globally and in Indonesia. This research highlights the forensic role in investigating the use of social media on the Android platform, specifically focusing on WhatsApp, Telegram, and Instagram. The primary focus is on forensic analysis methodology, involving experiments in a virtual Android device environment using Genymotion. The identification of artifacts from these three applications reveals a high investigative value, emphasizing the importance of a profound understanding of data storage locations and potential security risks. While users can delete data from devices, this research underscores that the persistence of data on platform servers remains a challenge, and this deep understanding is crucial for digital forensic processes in investigation and recovery of relevant information.