The development of an IoT-focused investigative methodology: the case of a Pico 4 headset

The paper is submitted to the conference as it is relevant to Internet of Things and Forensics in Constrained Environments. The rapid proliferation of Internet-of-Things (IoT) devices, including Virtual Reality (VR) headsets, has introduced new opportunities and challenges for digital forensics. This study focuses on the Pico 4 VR headset, a next-generation Android-based device, to explore forensic methodologies for extracting and analyzing digital artifacts. Crimes involving VR, such as harassment, fraud, and illegal content distribution, highlight the urgency for specialized investigative approaches. Using the Android Debug Bridge (ADB) suite to capture device data, we developed a forensic methodology that ensures data integrity while navigating the limitations of nonrooted devices. Our investigation reaffirms the potential of ADB commands, including backup and dumpsys, to collect system information, application data, and usergenerated content from the Pico 4 in a forensically sound manner. This paper focuses on the most significant aspect of this research, where a custom module for Autopsy facilitated efficient web browser data processing. However, the challenges posed by device security, inaccessible storage areas, and encrypted communications underscore the need for adaptable and innovative forensic techniques. The research describe here contributes to the field by presenting forensic approach tailored to the Pico 4. The findings emphasize the importance of combining traditional forensic tools with bespoke methodologies to address emerging IoT devices. Our work provides a foundation for future studies on VRrelated crime investigations, offering practical insights for digital forensic practitioners navigating the evolving landscape of IoT technologies.