Keywords: social media forensics, digital evidence, anti-forensics, metadata analysis, forensic tools, cybercrime detection
Social media forensics (SMF) has emerged as a critical subdomain of digital forensics, addressing the complex task of collecting, analyzing, and preserving evidence from dynamic, user-driven platforms. As social media plays an increasingly central role in communication, crime, and civil disputes, investigators face significant obstacles related to data volatility, platform encryption, legal jurisdiction, and user privacy. This review explores the foundational theories behind SMF, the legal frameworks that govern its practice, the array of technical tools and methodologies used for investigation, and the tactics employed by adversaries to evade detection or manipulate evidence. Special emphasis is placed on the evolving threat landscape, including deepfakes, ephemeral messaging, and decentralized platforms, as well as emerging solutions in artificial intelligence, blockchain, and real-time forensics. The paper concludes with a forward-looking perspective on the strategic, technological, and policy innovations needed to strengthen forensic readiness and ensure the integrity of digital investigations in an increasingly complex online ecosystem.