±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35875
New Yesterday: 3 Visitors: 129

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

UFED PA reporting timestamps from 2069

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page Previous  1, 2 
  

jlewis
Newbie
 

Re: UFED PA reporting timestamps from 2069

Post Posted: Nov 21, 17 03:04

We're seeing the 2069 timestamp with the logical extraction using 4PC (Method 1 and Method 2 reported the dates/times fine). We're told we have to do an update and then re-image. Any ideas? Last thing we have to do is go back to the source device since it was already returned.  
 
  

Logan
Senior Member
 

Re: UFED PA reporting timestamps from 2069

Post Posted: Nov 21, 17 17:20

Is parsing the records manually from the respective databases not an option?  
 
  

UnallocatedClusters
Senior Member
 

Re: UFED PA reporting timestamps from 2069

Post Posted: Nov 21, 17 17:55

Ask Cellebrite's tech support, but it would seem likely that once you updated PA to the current version, you will be able to re-process the iTunes mobile backup you already created and then have the correct format dates appear.

One possible option is to use the $99 single phone license of MOBILedit Forensic Express on the iTunes mobile backup you already created: www.mobiledit.com/onli...ic-express  
 

Page 2 of 2
Page Previous  1, 2