Advanced forensic analysis of Tails operating system and its implication to cybercrime in deep and dark web

The Tails operating system, renowned for its emphasis on privacy and anonymity, has become a preferred choice for individuals seeking to safeguard their online activities. Tails OS design centres around providing a secure environment that leaves minimal traces, thereby attracting privacy-conscious users. However, this very secure design also entices cyber criminals operating in the digital landscape, to use Tails to perpetrate illicit activities, creating new challenges for digital forensics practitioners in their pursuit of extracting evidence. This paper conducts an exhaustive forensics of Tails operating system, aiming to uncover the digital remnants left behind during its utilisation. By analysing the RAM, network, disk, and virtualisation, employing a range of activities and forensic tools, many artefacts are unearthed that provide insight into user interactions within the Tails environment. This research contributes to our understanding of the interplay between privacy preservation and digital evidence recovery, shedding light on the complexities of investigating a privacy-focused operating system like Tails.