Time/data change iP...
 
Notifications
Clear all

Time/data change iPad or iPhone log

pajkow
(@pajkow)
Member

Hia, 

Got a question, did anyone manage to prove based on iTunes backup (Later on examined forensically) that date/time was changed on a device manually? 

I am suspecting that those changes could be stored at:

/private/var/mobile/Library/Preferences/com.apple.preferences.datetime.plist

OR

/private/var/mobile/Library/Preferences/com.apple.timed.plist 

 

If this is the case, the question is whether the actual change time stamp is stored there and from what time to what is has been changed? 

If anyone has ever managed to prove this, please send poke on me priv. 

Thanks. 

Quote
Topic starter Posted : 18/02/2021 2:02 pm
fissa
(@fissa)
Junior Member

CurrentPowerlog.PLSQL might contain this kind of information, but i doubt it will be available in an itunesbackup. 

ReplyQuote
Posted : 19/02/2021 8:24 pm
Share: