Modified time - rep...
 
Notifications
Clear all

Modified time - reported

3 Posts
2 Users
0 Reactions
404 Views
(@armresl)
Noble Member
Joined: 21 years ago
Posts: 1011
Topic starter  

I'd prefer this to be an answer based on if you have Device Seizure, but I guess I'll take whatever software/hardware combo you use.

What does the "modified" time on your outputted report mean.
Specifically I'm dealing with Device Seizure and it only outputs a modified time which I'm told is

"that is the actual time and date stamp that the message was received or sent."

i.e. you find an SMS message, mark it, export it, create a report, burn that report to a thumb drive or CD.

What does the "modified time" mean to you in the grand scheme of things based on the specific software you're using to answer this posted question.

Thanks.


   
Quote
(@armresl)
Noble Member
Joined: 21 years ago
Posts: 1011
Topic starter  

Over 100 reads and no thoughts?


   
ReplyQuote
(@mscotgrove)
Prominent Member
Joined: 17 years ago
Posts: 940
 

This is not an area I know anything about however, I am sure you must have the means to answer your own question.

Take the device and 'play' with it. Check the modified dates etc, can you see the pattern. Is it consistent? Is it valid after power resets etc etc.

Have you looked at relevant dumps with a hex viewer to see how the report is processing the date?

On a general note many devices are vendor unique and not necessarily running standard Windows type software. Thus each device may generate dates, and create dates in different ways. How these dates get processed with messages, or file system could also vary.


   
ReplyQuote
Share: