Re:Reliability of police mobile phone evidence questioned af...
by ycomnews2021 on Monday April 26, 2021 @08:39PM
(#26950243)
Yes. So Cellebrite should be writing the data to write-once storage prior to performing any analysis of the content.
In absence of write-once media, they are betting that the hashes they capture will be the same every time they image the device because they never modify the device.
In absence of write-once media, they are betting that the hashes they capture will be the same every time they image the device because they never modify the device.