Notifications
Clear all
Topic starter
25/05/2021 3:13 am
Goodnight.
I need to do a case forensic analysis of a Whatsapp database for IOs.
Basically I need to know if a message was sent directly by the app or by Whatsapp WEB.
I found some columns in the ChatStorage.sqlite database: ZMESSAGETYPE
ZFROMJID
ZTOJID.
I think it must be the ZMESSAGETYPE column, which has values from 0 to 8. However, I couldn't find what each value from 0 to 8 means.
Thank you all.