Greetings,
I'm still willing to look at the image for you, too. I sent you my address in a PM.
-David
You don't say which model that you are looking at - but a quick bit of research on the web gives the
Oh, and like kovar says, chill out. Exclamation marks are like women with cats - more than two and there's a problem.
That I like 😉
Model number is PNA-E3530.
Ah, so the one I listed then …
Your best method for getting anything off one of these is through a live analysis.
We had one a few months ago and we managed to get some itinerary info from the image, but that was about it, the rest was through the live analysis.
This device is sold through Lidl afaik.
Never looked at one sorry.
Mr Fox can you explain how you got the itinerary off the image what did u use?
and how to go about live analysis?
hi Mr Fox can you PM how you went about it by getting the itinerary and then live analysis?
birch39.
We took an image of the via FTK imager, and used EnCase to look at the image.
In the one we had, we had two folders, named 'Targa' and 'Maps'.
In the 'Targa' folder there is a subfolder called 'itinerary', there you will find the file 'default.itf' which is an itinerary file.
There is also a file called 'namehistory.syg', which has some location names inside. This is in the main folder called 'Targa'.
The live analysis was just done with a camera, and the device in a faraday bag/box.
Thanks fox. quick question did you get the dates and times with the itineray? or are there any traces that you picked up elsewhere as not see any so far.