Nowadays technology has developed very rapidly. The impact of the rapid development of technology is to increase the use of social media. One of the instant messaging applications that is currently popular and growing is WhatsApp. WhatsApp is a cross-platform instant messaging service for smartphones that use the internet to send messages. Due to the high number of Whatsapp users, there are more and more criminal acts, one of which is narcotics transactions. This research was conducted by

more »

... ng conversation scenarios containing narcotics transactions carried out through the-based WhatsApp application mobile. This study aims to restore evidence of conversations containing deleted narcotics transactions by applying the forensic stages of the National Institute of Standards and Technology. The process of searching for digital evidence uses three tools forensic,MOBILedit Forensic Express, Magnet Axiom, and SysTools SQLite Viewer. Based on measurements the percentage of index numbers from each tool in the process of finding evidence, conversation data obtained a percentage of 100%, details of the time and date messages were sent and received by 67%, smartphone contact by 100%, and pictures by 33%. will be given to the court to assist in the process of enforcement and decision on lawsuits to uncover criminal cases of drug trafficking or narcotics transactions.