Notifications
Clear all

Date not present

2 Posts
2 Users
0 Likes
927 Views
 dega
(@dega)
Posts: 261
Reputable Member
Topic starter
 

dear all,

few time ago LE seizured a phone and did a copy of it with UFED. they did:

Physical Decrypted Boot Loader (Recommended)

FileSystem Decrypted Bootloader Full File System (Recommended)

AdvancedLogical 01

Then they gave back the phone.

My client says that the phone has been used in the period between the seizure and the official copy. There's a call that prove it.

I obtained the copy but not the portable file. I opened it with Mobile edit forensic express. But that date is not present in the calls log.

If I ask to a colleague with ufed, to create the portable, may I find that call? or the switch on date?

thanks and best regards

This topic was modified 3 years ago by dega
 
Posted : 07/10/2020 5:07 pm
passcodeunlock
(@passcodeunlock)
Posts: 792
Prominent Member
 

I sent you a PM.

 
Posted : 12/10/2020 8:06 pm
Share: