Notifications
Clear all
Topic starter
27/07/2022 7:51 pm
Has anyone done a test to compare a phone extraction with UFED4PC and then after several new versions of UFED4PC conduct an extraction of the same phone (in the same state ie unused during this time) to see if the extraction pulled more data.Â
09/08/2022 2:24 pm
Yes !Â
Â
I have seen where advancements in the forensics tools have later decoded further data. This is not uncommon. We capture screenshots so we can compare datasets between date and software versions.Â
Â
There is often no need to conduct a further extraction of the handset, just decode the data extraction you have stored as evidence again.Â
14/09/2022 10:21 am
It always depends on which kind of extraction you have.Â
- Physical or FFS: There shouldn't be a change with an update.
- Logical or filesystem: There can be a change.
The analyses later changes nearly with every update.
dega reacted