I have a question about a "Powering Event" in an Android Device. I conducted a physical extraction of a Huawei H892L cell phone using Cellebrite UFED4PC. I have several powering events logged on the device but a few of them show they are deleted. I can assume this means the end user deleted the events manually on the handset. Where in the device is the option to delete those events? The device is not rooted.
For anyone that is interested I believe I figured this out. Huawei phones come with a preisntalled app called "Phone Manager". This app has a clean sweep feature that allows the end user to select what items are deleted including event log entries. I'm not sure if it's on all Huawei Android phones or not but it is on the H892L.
Thanks for taking the time to post a follow up.