Notifications
Clear all
Topic starter
01/03/2024 2:19 am
One of my acquaintances said he ran UFED's advanced logical extraction feature against a test 8th generation iPad with iOS 17.0.3 installed.
However, he said that when he used physical analyzer to read the extracted data, physical analyzer did not automatically recognize the deleted files.
Specifically, he was unable to recover all of the notes and photos that he had deleted approximately 15 minutes prior to the extraction.
As for the web history, the physical analyzer showed no deleted web history, but it did show some web history that was deleted over six months ago.
He is curious as to why these phenomena occur.
Please let me know what causes this and how to deal with it.
I will report them to him immediately.
Thank you in advance.