Notifications
Clear all
General (Technical, Procedural, Software, Hardware etc.)
1
Posts
1
Users
0
Reactions
1,177
Views
Topic starter
01/09/2023 6:10 pm
Hi all,Â
I have a Samsung fold 4 where the phone entered into a boot loop (user entered the unlock pattern after first boot, crashed, rebooted, repeat) a month prior to me carrying out an investigation for a case.
Having fixed the bootloop and examining the phone in Cellebrite (smart flow extraction), i noticed the date and time of the phone was set back about 3 months. However, I know that it was set correctly just before the first crash.
My question is, how can i determine or find any information from the phone logs, etc, to show when the time and date was changed. I can show the reported last activity correctly, I just need to be able to show or prove the time of the date/time change.
Thanks in advance
This topic was modified 1 year ago by Datamuncher