IDENTIFIKASI BUKTI DIGITAL PINJAMAN ONLINE MENGGUNAKAN LIVE FORENSIC PADA SISTEM OPERASI PROPRIETARY

Abstrak

Information and communication technology is rapidly evolving in line with the improvement in human quality of life. However, this advancement also presents various challenges, including the rise of cybercrime. One of these challenges is the efforts of perpetrators to delete electronic evidence stored in Random Access Memory (RAM) to avoid legal consequences. This study aims to conduct a digital forensic analysis with a focus on recovering deleted evidence. The method used in this research follows the guidelines of the National Institute of Standards and Technology (NIST), which includes four main stages: collection, acquisition, analysis, and reporting. To support the recovery process of digital evidence, forensic tools used include software commonly used in this field, such as FTK Imager and WinHex. These tools are employed to evaluate the effectiveness in recovering crucial data, such as WhatsApp conversation texts related to an online loan fraud case. The results of the study show a significant success rate in recovering relevant digital evidence. For instance, over 85% of deleted data was successfully recovered using the applied methods. These findings demonstrate that the digital forensic techniques used can provide a major contribution in addressing the challenges of electronic evidence deletion, particularly in cybercrime cases. This research also contributes to the development of live forensics techniques to enhance the effectiveness of investigations into cybercrimes.