mobile phone calend...
 
Notifications
Clear all

mobile phone calendar entries

3 Posts
2 Users
0 Likes
290 Views
(@chrisfearns)
Posts: 11
Active Member
Topic starter
 

Is it possible from a forensic analysis of a mobile phone handset, to determine the exact time and date that a calendar entry was made by the user? for example an entry of 'may 20th 2006 lunch date with joe bloggs' was entered on may 14th 2006 at 14.13hrs? or is it not possible to determine an accurate date?

 
Posted : 24/06/2006 4:40 am
(@mindsmith)
Posts: 174
Estimable Member
 

Not being a subject matter expert on this - I think not - it would however depend on the type & OS used by the mobile. What you'll find in most instances is that the calendar entries are kept in a single file such as calendar.ncc (eg on a Nokia) - this file contains all entries & therefore the timestamp on the file reflects the date & time of last update - you cant drill down to specifics in this instance.

It would interesting to find out if there is another way. Perhaps some of the more experienced folk on this forum can shed some light here?

Regards,

 
Posted : 28/06/2006 1:28 pm
(@chrisfearns)
Posts: 11
Active Member
Topic starter
 

by way of answering my own question i got on to Nokia and spent $0.75 a minute to a support line their technical guy doesnt believe that in older models you would be able to determine when an entry was made, which certainly raises interesting questions in terms of attributing 'pool' phones seized in an investigation.

 
Posted : 28/06/2006 3:28 pm
Share: