Forensic WhatsApp based Android using National Institute of Standard Technology (NIST) Method

WhatsApp Messenger is a popular Instant Messaging (IM) application that is widely used in the 2017-2019 range. A large number of WhatsApp Messenger users will certainly have a positive and negative impact, the negative effects that are usually found are cases of crimes such as fraud into cybercrime crimes. The way to prove the perpetrators of the crime is to find evidence through digital forensics. This case will be revealed by one branch of digital forensics, namely mobile forensics because the evidence obtained is a smartphone which is a mobile device. This research uses the method of the National Institute of Standard Technology (NIST). NIST is a method that conforms to standards in the forensic field and has 4 forensic stages namely Collection, Examination, Analysis, Reporting. The results of this study are a comparison of evidence between a smartphone in a smartphone and a smartphone without a smartphone. The rooted smartphone managed to get an 11 encrypted and 1 decrypted conversation database, 152 images received and 60 sent, 8 conversation times, 8 video notes, 3 folder voice notes, 1 document sent and 5 received. Smartphones not rooted only managed to get evidence in the form of text conversations and the time of sending messages.