Hi colleagues,
I would like to ask if there is a log file inside android phones, such as windows event log that can keep information of changing date/time of the device manually and if it can keep information about specific files. For example I put the phone in previous date/time, record a video and change it again to real date/time. Can I find the real date/time that the video was captured as well as the changes that the user did to the phone?
And last question, is there a log file that keeps track of the files transferred to the phone? For example in the case of recording the video mentioned above from another phone of the same brand and model (in order to have a specific geolocation) and then send it to my phone in order to say that I was on that geolocation during that time..
I know that UFED gives info about power events, but I want more detailed information. I checked the log_setupwizard and recovery_log files, as well as other system files that IEF retrieved from a test_mobile image, but I couldn't find an answer. If someone has encountered such scenario, please give me some hints on where to look. Thank you in advance!!
Efthymios