Notifications
Clear all
General (Technical, Procedural, Software, Hardware etc.)
2
Posts
2
Users
0
Reactions
770
Views
Topic starter
16/05/2023 2:01 pm
Hi All, hoping to get some insights here. Working on a forensics case that involves someone deleting a crime scene video from a mobile phone (one of the new Samsung Galaxy phones). Cellbrite supports this device for a Qualcomm full file system extraction, which I did. Obviously, I have no hopes of recovering the actual video, but I was wondering if there are any logs that indicate that a video was even taken? Any "activity" databases I can look into? If I can show that a video was taken or the video app was running at a specific time, this would be enough.Â
Thank you for all the help!
18/05/2023 1:12 pm
Check:
- Android System Logs
- Camera App Logs
- Media Metadata Databases
- Application Usage Logs
- Google Timeline