Can you provide a bit more details to this?
Unless you are "extracting" logical file, in this case a video file, how would you distinguish one block of data from an other without looking at it?
This is sort of like an inverse Schrödinger's cat...
To be able to tell what it is, you must look, at least at the file system level - but by looking you are using up time and intruding on the privacy.
DigitalAgent wrote:
Hey guys,
A question was raised within my digital forensic unit and I just wanted to hear additional input:
If you have a cell phone with multiple videos stored on the device and you only wanted to pull only one of them, I know Cellebrite will need to extract them all in order to retrieve that one video you need. Is there a forensic program that will let you only extract that one video?
This would save time and privacy of our client, just two quick general reasons we were thinking of. Any input would be great, thank you.
↧