Timestamps on artifacts are after time of seizure

General (Technical, Procedural, Software, Hardware etc.)

Last Post by global4n6 9 months ago

1 Posts

1 Users

0 Reactions

772 Views

RSS

global4n6

(@global4n6)

New Member

Joined: 1 year ago

Posts: 1

Topic starter 02/10/2024 9:08 pm

Hey y'all,

I have three phones that were taken into custody in 2014. Nothing was done with them until they were released from police custody in 2024 and subsequently forensically processed withe Cellebrite.

Analysis of two of the devices, one iPhone and one Android, are all showing dates from 2017. The iPhone is even reporting that the phone was factory reset in 2017. I've never ran into such a discrepancy. What is causing this? Is this due to possible inaccuracy of the local date/time on the device?

Any insight is appriciated!

Quote