Notifications
Clear all
General (Technical, Procedural, Software, Hardware etc.)
1
Posts
1
Users
0
Likes
162
Views
Topic starter
Hi all,Â
I have a Samsung fold 4 where the phone entered into a boot loop (user entered the unlock pattern after first boot, crashed, rebooted, repeat) a month prior to me carrying out an investigation for a case.
Having fixed the bootloop and examining the phone in Cellebrite (smart flow extraction), i noticed the date and time of the phone was set back about 3 months. However, I know that it was set correctly just before the first crash.
My question is, how can i determine or find any information from the phone logs, etc, to show when the time and date was changed. I can show the reported last activity correctly, I just need to be able to show or prove the time of the date/time change.
Thanks in advance
This topic was modified 3 weeks ago by Datamuncher
Posted : 01/09/2023 7:10 pm