BbFlipz wrote:
Hi
I am working on a case with mobile phones and the court asked me to make clear if the timestamps of the messages are in Local time or in UTC time and if any further calculations are needed.
Are you able to get the cell detail records from the cell phone company via production order? Confirming the timestamps via software is obviously a good step, but the actual cell phone records will be a valuable confirmation for the courts and negate any possible arguments via defense regarding the timestamps since its coming from an un-biased 3rd party. You can also check for any possible missed messages not extracted by the forensic software.
↧