I so infrequently post, because just before I do so, I think to myself…"this is a really dumb question"…then I usually find the answer on my own. On this occasion however, I appear too dense to hold back.
I have a physical image of the above noted phone acquired through a UFED Physical Dump. The phone is not available for analysis. Both the file system dump and physical dump were performed using the UFED.
UFED software does not report or parse the call logs. I am interested in the last number dialed. When I look at the CLOG directory, the dates of the calls are six months prior to the last usage of the phone (known calls as reported by the user and the CDR). So where in the file structure can I find the last number dialed, or call logs?
Any thoughts about the Samsung file structure would be appreciated.