±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 3 Overall: 36459
New Yesterday: 5 Visitors: 125

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Audio File Creation Date is wrong

Discussion of legislation relating to computer forensics.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page Previous  1, 2 
  

artshocx
Newbie
 

Re: Audio File Creation Date is wrong

Post Posted: Sep 26, 12 22:41

unfortunately, the client isn't that tech savvy, which is why they messed it up in the first place. the file is an audio recording of a hearing and they are the officiating agency so they are going to have learn. they have only just begun providing the audio files, for years they were providing transcripts, so… anyway, i was hoping for something as idiot proof as possible, which is why i asked about zipping, i think i could talk them through winzip LOL. thanks.  
 
  

mscotgrove
Senior Member
 

Re: Audio File Creation Date is wrong

Post Posted: Sep 27, 12 00:02

Before you talk them through anything, check what the date of the file on their system is.

Winzip can only preserve what is currnetly there, and not what might have been.
_________________
Michael Cotgrove
www.cnwrecovery.com
www.goprorecovery.co.uk 
 
  

eyez0n
Member
 

Re: Audio File Creation Date is wrong

Post Posted: Sep 27, 12 00:15

Do you know what the original format of the file was as stored on their system? Does it match the format provided to you?

From my experience, some government agencies utilize commercial recording systems that store files in proprietary format and to provide a recording to a requester, they have to export to a commonly used format (e.g., mp3). Doing so would obviously result in an .mp3 file with a creation date after that of the original.  
 
  

erowe
Senior Member
 

Re: Audio File Creation Date is wrong

Post Posted: Sep 27, 12 19:09

Sending them a copy of FTK imager and walking them through it on the phone might work. FTK imager is pretty intuitive so with any luck they won't have problems following directions. That way you'll get the right time stamps as well as a hash. (Also next time they will know how to do it with any luck.)  
 

Page 2 of 2
Page Previous  1, 2