Sifting through the ashes: Amazon Fire TV stick acquisition and analysis

Date published

2019-01-14

Free to read from

Supervisor/s

Journal Title

Journal ISSN

Volume Title

Publisher

Elsevier

Department

Type

Article

ISSN

1742-2876

Format

Citation

Hadgkiss M, Morris S, Paget S. Sifting through the ashes: Amazon Fire TV stick acquisition and analysis. Digital Investigation, Volume 28, March 2019, pp. 112-118

Abstract

The Amazon Fire TV Stick is a popular device that is the centre of entertainment for many homes. Its collection of functions and features generates a considerable amount of data, giving this device the potential to be included in a multiple investigations. Highlighting a clear requirement for a forensic analysis of the device.

Previous research of smart entertainment devices focuses on the larger areas of the market including Smart TV's, smart speakers and smart watches. All have provided potential forensic artefacts that can be used in investigations. However, data is often acquired using methods that can compromise the forensics of the data.

An Amazon Fire TV Stick was populated with data following a methodology that captured the multiple uses of the device. A chip off acquisition method was then applied to acquire a forensic image. Analysis demonstrated there were a number of artefacts recoverable relating to the system, users and Kodi. The majority of the relevant artefacts identified were located in SQLite3 databases and XML files.

Description

Software Description

Software Language

Github

Keywords

Amazon fire TV stick, Digital forensics, Chip off

DOI

Rights

Attribution-NonCommercial-NoDerivatives 4.0 International

Relationships

Relationships

Supplements

Funder/s