Felix Freiling

Understanding Strategies and Challenges of Timestamp Tampering for Improved Digital Forensic Event Reconstruction

2025

Timestamps play a pivotal role in digital forensic event reconstruction, but due to their non-essential nature, tampering or manipulation of timestamps is possible by users in multiple ways, even on running systems. This has a …

From sync to seizure: A binary instrumentation-based evaluation of the iCloud backup process

2025 · Forensic Science International Digital Investigation

Mobile phone data is crucial for gathering investigative leads and solving cases in most criminal investigations. An increasingly common method for collecting mobile data as evidence is acquiring phone backups stored in manufacturer cloud services. …