While I work in Data security and architecture, i have very little forensic knowledge but following a good friend of mine having his devices seized, i thought I'd dip my toe in to see if could offer him some support - anyway I'll save the details for another post.
From reading through some posts on this forum it appears that standard protocol for mobile devices is to keep them powered up and in airplane mode. Which i why I was puzzled when he showed me on his 'find my' application that on separate occasions, the location of both his iPhone and iPad were showing up weeks and months after they were seized and with the police.
Now perhaps this is ok and something has been done to them to disable them writing anything out, but I would have thought logs would be produced at the very least? Could the integrity of the investigation be brought in for discussion. I figure some of you must know.
On a health and safety note, I certainly wouldn't want to work in a place where lets say a financial crime syndicate who's very liberty was being put at risk from analysis being done at your place of work which was being broadcasted out.
Â
Please reach out if you know why this may be.
Â
Cheers,
Holiam