When was iPhone Res...
 
Notifications
Clear all

When was iPhone Restored to Factory Settings?

3 Posts
3 Users
0 Likes
633 Views
(@olifer)
Posts: 63
Trusted Member
Topic starter
 

I have an iPhone version 3 that was restored to factory settings sometime prior to me taking possession of it. I have went through a basic setup on it to get into it and have acquired it with Oxygen. Is there a date and time stamp attribute in one of the files that will help me to determine when the phone was factory reset?

Thanks in advance for your assistance.

 
Posted : 30/05/2014 11:20 pm
(@afentis_forensics)
Posts: 47
Eminent Member
 

good afternoon,

assuming the handset clock is accurate, check the timestamp attributes for the re-initialised file system. also consider checking the network records for the associated telephone number - you should see a tiny bit of GPRS/data activity at the moment the remote wipe command was sent to the device. you may also want to contact Apple and/or the network provider in many instances the user will remote wipe and then try to cancel their accounts. this can give you further time references to work with.

all the best,
ross @afentis

 
Posted : 21/06/2014 10:19 pm
(@polar)
Posts: 48
Eminent Member
 

/private/var/mobile/Library/Logs/AppleSupport/general.log

 
Posted : 24/06/2014 12:38 am
Share: