±Forensic Focus Partners

Become an advertising partner

±Your Account


Forgotten password/username?

Site Members:

New Today: 0 Overall: 36115
New Yesterday: 5 Visitors: 128

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

mobileSMS.plist values

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts


mobileSMS.plist values

Post Posted: Dec 07, 18 02:34

I am examining the mobileSMS.plist file from an iPad. The message retention setting was changed from "forever" to "30 days" as documented in the file. I am trying to determine the date/time the change was made. One suggestion was that the "SuspendTime" value is the time the retention was changed however when I test it with another iPad, that value does not seem to change. I have searched online for a breakdown of the values in mobileSMS.plist but have not found anything.
Does anyone know how I can determine A. the date/time the retention setting was changed and B. if there are any other variables besides human interaction that could change the retention setting. Thanks in advance.  

Senior Member

Re: mobileSMS.plist values

Post Posted: Dec 08, 18 18:16

Apple has made some changed to what is stored on the device in order to save space on devices and also charge for additional iCloud storage. A couple of months back there was a change in SMS storage. Have a look online.  

Page 1 of 1