Notifications
Clear all
General (Technical, Procedural, Software, Hardware etc.)
2
Posts
1
Users
0
Reactions
660
Views
Topic starter
18/03/2016 8:51 pm
Hi,
Long story short. I have some deleted internet history (Chrome on Android phone) but how can I prove the user has deleted it and what date he deleted it and another auto process hasnt deleted it? Another sub question …. how do I know the url's on his phone are not sync'd from another device?
I'm guessing there is a .DB somewhere on the phone that tracks sync'd url's? I only have a phone to work with and no other assumed devices.
I've used Ufed to get a read off the phone and have IEF at my disposal as well as SQL tools.
Thanks
Topic starter
21/03/2016 3:18 pm
Your help will be greatly appreciated please, if anyone can give me a pointer or 2.
Thanks
M