Hi,
Hopefully this fits in this section. I am in the middle of attempting to recover deleted Facebook Messages, but am now stuck.
I am unsure of what types of files these are and how to open or use them?
Any help is appreciated.
Hi,
Some context on what we are looking at would help.
That is a screenshot of what?
How did you get the data, what are you looking at it with, etc, etc.
Hi,
Hopefully this fits in this section. I am in the middle of attempting to recover deleted Facebook Messages, but am now stuck.
I am unsure of what types of files these are and how to open or use them?Any help is appreciated.
Hi,
Some context on what we are looking at would help.
That is a screenshot of what?
How did you get the data, what are you looking at it with, etc, etc.
This is a screen shot of the documents folder
It was pulled using Phone Rescue and these are the files inside the messenger app folder.
It looks like all the files are named after Unix Timestamps.
I am not familiar with Phone Rescue but a good starting point might be to identify the file types you have from their binary signatures. You could use a forensic suite such as X-Ways, or something along the lines of
Once you have the file type predictions, you might want to start by exploring database types (e.g., SQLite) if any.
Is 6/28/2016 the date when this data set was exported?
This is a screen shot of the documents folder
It was pulled using Phone Rescue and these are the files inside the messenger app folder.
It looks like all the files are named after Unix Timestamps.
5/11/2016 is the date the files were exported. I am curious to where you got 6/28/16 from. Thanks for your help so far!
Sorry just realized that the date modified says 6/28/16