Forensic Analysis of I2P Communication Network in Android and macOS Environments

The Invisible Internet Project (I2P) has emerged as a crucial privacy-centric communication network, offering users a secure and anonymous online environment. As the utilization of I2P continues to expand, the demand for specialized forensic techniques tailored to this network becomes imperative. This paper comprehensively investigates I2P forensics within Android and macOS environments, addressing the unique challenges inherent in extracting and scrutinizing digital evidence from I2P applications. The research explores various artifacts and techniques to aid in reconstructing user activities within the I2P network, including analyzing storage files, configuration data, logs, and cache files. Additionally, the study investigates memory forensics as a complementary approach to I2P forensics. The outcomes of this research contribute to advancing forensic analysis techniques in privacy-centric networks, facilitating the efficient investigation of I2P-related crimes.