Greetings all.
I have had to do a memory dump using Cellebrite UFED as the sms is not supported. I found the sms's in question. Does anyone know of any tool that would parse the messages and give me a break down of the dates and times. Using FTK, I see the to/ from numbers, and the content of the sms and belive that the date code is 36ddc438 hex.
I am fried on this one. Someone point me in the right direction PLEASE.
Thanks
Kevin
AOL Time Dec Big Endian shows that HEX as 19/10/2009 001717. Is that possible??
Take a look at a post i had on a Samsung SCH-R450 and R210 here
http//www.forensicfocus.com/index.php?name=Forums&file=viewtopic&t=3952
i dont know if its the same structure, but someplace to begin. Also look at Sanderson Forensics 'Revenge' program. It's a lifesaver for decoding dates and times.