[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-152751-105":59,"doc-detail-152751-en":131},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":124,"head_meta":126,"extra_data":128,"updated_unix":130},105,"en","a-holistic-digital-forensic-analysis-of-discord-storage-memory-and-network-perspectives","A holistic digital forensic analysis of Discord - Storage, memory, and network perspectives","","Social media growth has increased opportunities for criminal exploitation, making digital forensics essential for uncovering behavior and identifying suspects. This paper studies Discord remnants on Windows and Linux using storage, memory, and network analysis techniques. The investigation recovers key artifacts across all three areas, including login and payment details, chat history, and account information. Combined, these artifacts enable reconstruction of most users’ Discord activity, supporting forensic casework and investigative workflows.",{"@graph":69,"@context":123},[70,84,106],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":40,"@type":76,"position":81},"https://docshare.wps.com/document/research-report/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/a-holistic-digital-forensic-analysis-of-discord-storage-memory-and-network-perspectives/152751/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/a-holistic-digital-forensic-analysis-of-discord-storage-memory-and-network-perspectives/152751.png","ImageObject",300,407,{"name":92,"@type":93},"Ivy","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-11-01","2026-08-27",true,{"@type":102,"interactionType":103,"userInteractionCount":105},"InteractionCounter",{"@type":104},"ViewAction",23,{"@type":107,"mainEntity":108},"FAQPage",[109,115,119],{"name":110,"@type":111,"acceptedAnswer":112},"Why is digital forensics important for social media platforms like Discord?","Question",{"text":113,"@type":114},"Social media growth increases the risk of criminal misuse. Forensic examination helps uncover evidence about illicit behavior and supports suspect identification.","Answer",{"name":116,"@type":111,"acceptedAnswer":117},"What analysis areas does the paper focus on for Discord investigations?",{"text":118,"@type":114},"The paper examines Discord remnants using three focus areas: storage, memory, and network perspectives on both Windows and Linux.",{"name":120,"@type":111,"acceptedAnswer":121},"What types of forensic artifacts does the study recover?",{"text":122,"@type":114},"Recovered artifacts include login and payment details, chat history, account information, and other evidence useful for reconstructing user activity.","https://schema.org",{"og:url":83,"og:type":125,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":127,"canonical":83},"index,follow",{"doc_id":129,"site_id":62},152751,1787866905,{"code":4,"msg":5,"data":132},{"doc_id":129,"user_id":133,"nickname":92,"user_avatar":134,"doc_module":4,"category_id":39,"category_name":40,"doc_title":65,"doc_description":67,"doc_content":135,"file_id":136,"file_url":137,"file_type":138,"file_size":139,"view_count":105,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":140,"language":141,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":142,"faqs":143,"seo_title":144,"seo_description":67,"update_tm":130,"read_time":145,"preview_page_count":4},549758252649,"https://ap-avatar.wpscdn.com/avatar/8000253669c5317157?_k=1778319167496531819","Received: 26 January 2024 | Revised: 9 May 2024 | Accepted: 10 May 2024  \nDOI: 10. 1111/1556-4029.15548  \nOR IG I NAL PAP E R  \nDi g i t al & Mu l t i m ed i a S c i en c es  \nA holistic digital forensic analysis of Discord – Storage, memory, and network perspectives  \nKhushi Gupta BSc | Phani Lanka MSc | Cihan Varol PhD  \nDepartment of Computer Science, Sam Houston State University, Huntsville, Texas, USA  \nCorrespondence  \nKhushi Gupta, Department of Computer Science, Sam Houston State University, Huntsville, TX, USA.  \nEmail: [kxg095@shsu.edu](kxg095@shsu.edu)  \nAbstract  \nIn the last decade, the market share and user base of social media applications have witnessed significant growth. However, this surge in popularity has inadvertently drawn the attention of criminals aiming to exploit these platforms for illicit activities. The forensic examination of these applications emerges as a pivotal avenue for uncovering valuable insights into criminal behavior and identifying suspects. Discord, asocial media platform, has become a significant focal point for such illicit activities. In this paper, we examine the remnants of Discord on both Windows and Linux operating systems, employing storage, memory, and network analysis techniques to review the remnants of Discord. Our investigation reveals a range of crucial artifacts that have been successfully recovered across all three areas of analysis, including login and payment details, chat history, account information, and much more. Collectively, these artifacts constitute a valuable resource for forensic investigations, allowing thereconstruction of most of the user's activity.  \nK E Y WO R D S  \ndigital forensics, Discord, Linux, memory forensics, network forensics, social media forensics, Windows  \nHighlights  \n• Discord, a social media platform, has become a significant focal point for illicit activities.  \n• This paper analyzes the remnants of Discord on Windows and Linux operating systems.  \n• We examine three focus areas, namely storage, memory, and network.  \n• The investigation recovered pertinent artifacts, user credentials, payment information, chats, etc.  \n• Our results provide an overview on how examiners can reconstruct user activities on Discord.  \n1 | INTRODUCTION  \nThe widespread integration of the Internet has significantly transformed the ways of human communication. Presently, social media platforms, voice-over IP (VoIP), and instant messaging applications have emerged as the predominant means of interaction [1] . These platforms foster collaborative community engagement and facilitate the sharing of content. Social media encompasses a diverse range of  \nwebsites and applications crafted to enrich online networking and information sharing [2] .  \nAs a result, digital evidence extracted from social media applications has emerged as a pivotal frontier in digital forensics. With the profusion of social media apps and their vast user bases, a substantial volume of information is generated daily, providing ample digital evidence for forensic analysis. Additionally, the year 2021 witnessed an impressive 4.48 billion active social media users, signifying a  \n1320 | © 2024 American Academy of [Forensic Sciences.](Forensic Sciences. wileyonlinelibrary.com/journal/jfo)[ wileyonlinelibrary.com/journal/jfo](Forensic Sciences. wileyonlinelibrary.com/journal/jfo) J Forensic Sci. 2024;69:1320–1333 .  \nGUPTA et al.  \n|  \n1321  \nnotable 13. 1% surge from 2020 [3], foreshadowing continued growth in the years ahead.  \nWhile extensive research has been conducted on wellestablished social media platforms like Facebook, WhatsApp, TikTok, Skype, and Twitter [4–7], more recent social media applications are continually emerging and amassing millions of users. An example of such a platform is Discord, a versatile social media platform that allows users to engage in voice and video calls, exchange text messages, share multimedia, and transfer files. Discord also offers both private chats ","cbCaiaqTp1oOiG7k","https://ap.wps.com/l/cbCaiaqTp1oOiG7k","pdf",1654629,14,"English","# Introduction\n## Problem statement\n## Scope of study","[{\"question\":\"Why is digital forensics important for social media platforms like Discord?\",\"answer\":\"Social media growth increases the risk of criminal misuse. Forensic examination helps uncover evidence about illicit behavior and supports suspect identification.\"},{\"question\":\"What analysis areas does the paper focus on for Discord investigations?\",\"answer\":\"The paper examines Discord remnants using three focus areas: storage, memory, and network perspectives on both Windows and Linux.\"},{\"question\":\"What types of forensic artifacts does the study recover?\",\"answer\":\"Recovered artifacts include login and payment details, chat history, account information, and other evidence useful for reconstructing user activity.\"}]","A holistic digital forensic analysis of Discord - Storage, memory, and network perspectives | PDF",35]