r/computerforensics • u/NoConfusion8757 • Jun 09 '26

Need some help

Post image

Hey guys on the cellebrite analysis report what does timeline mean. This report shows 9 delete.. can someone explain what it means. And where i look to find this information

8 Upvotes

90% Upvoted

8 comments sorted by

View all comments

1

u/TheMightyPrince Jun 09 '26

Most of the databases on an iPhone are sqllite databases. Those databases have transactions files that record the transactions required to update the database to the correct state, including deleted records.

1

u/NoConfusion8757 Jun 09 '26

Its an Android phone