Take the State of DFIR Survey Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey

Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →
Proving deleted/syn...
 
Notifications
Clear all

Proving deleted/syncronised internet history?

2 Posts
1 Users
0 Reactions
855 Views
(@mark_foren)
New Member
Joined: 11 years ago
Posts: 4
Topic starter   [#13973]

Hi,
Long story short. I have some deleted internet history (Chrome on Android phone) but how can I prove the user has deleted it and what date he deleted it and another auto process hasnt deleted it? Another sub question …. how do I know the url's on his phone are not sync'd from another device?

I'm guessing there is a .DB somewhere on the phone that tracks sync'd url's? I only have a phone to work with and no other assumed devices.

I've used Ufed to get a read off the phone and have IEF at my disposal as well as SQL tools.

Thanks



   
Quote
(@mark_foren)
New Member
Joined: 11 years ago
Posts: 4
Topic starter  

Your help will be greatly appreciated please, if anyone can give me a pointer or 2.

Thanks
M



   
ReplyQuote

Enterprise Partners

  • atola-logo
  • semantics21 2026 FF logo
  • MagnetForensics_ForensicFocus
  • celebrite-logo

Partners

  • Aid4Mail-Logo
  • logo Belkasoft 135x100
  • gmdsoft-logo
  • Logo_MSAB_Black (2)
  • ADF
  • detego-logo

Academic Partners

  • University of Southampton logo 2
Share: