Android forensics advice?
Notifications OFFPost deleted by user
The answer is yes..
They are able to look at previously viewed and deleted data. My partner is currently in proceedings, the jury deciding from tomorrow onwards. They have based the charges on IIOC found in a secure folder, but also, inciting from cache conversations which have been on the device "at some point" but weren't able to be viewed as they were no longer present.
He has pleaded not guilty, and there are discrepancies EG him not being attributed to accounts they have said he's used in any way through an expert report.. but I just thought I'd let you know, they can find stuff, even if it's not still present.
They are able to look at previously viewed and deleted data. My partner is currently in proceedings, the jury deciding from tomorrow onwards. They have based the charges on IIOC found in a secure folder, but also, inciting from cache conversations which have been on the device "at some point" but weren't able to be viewed as they were no longer present.
He has pleaded not guilty, and there are discrepancies EG him not being attributed to accounts they have said he's used in any way through an expert report.. but I just thought I'd let you know, they can find stuff, even if it's not still present.
My person is being referred to CPS for 2 images he claims he even know were there and a KIK conversation he'd deleted, also deleted the app and thought wouldn't be on his phone. If they've done it; they'll find it. There are people prosecuted on here who didnt ask for stuff and were sent it anyway despite deleting and blocking......because they didn't report it and it was still hidden on their phone.
If we are talking about images uploaded to kik then the evidence will still be held by kik, even if it no longer exists on the device. That's because they scan all uploaded images against a database of known iioc. If they get a match then they report to police.
So the real issue is not whether the image is still on the device, but if they can prove it came from that device. They will have an ip address, so they can link that to the person who purchased the sim card. If no one else uses that sim card then there is only one person who could have uploaded the images.
As for the other question about cached images. They can still be recovered after being being deleted, but only if they have not been overwritten by other data. If the person was doing a factory reset it should erase all the data leaving no trace at all.
However when people use different words like 'wiped', then it can mean different things. Did they just delete the app, or did they do a full factory reset? If they didn't do a factory reset, then there is no guarantee that the images will have been completely removed.
So the real issue is not whether the image is still on the device, but if they can prove it came from that device. They will have an ip address, so they can link that to the person who purchased the sim card. If no one else uses that sim card then there is only one person who could have uploaded the images.
As for the other question about cached images. They can still be recovered after being being deleted, but only if they have not been overwritten by other data. If the person was doing a factory reset it should erase all the data leaving no trace at all.
However when people use different words like 'wiped', then it can mean different things. Did they just delete the app, or did they do a full factory reset? If they didn't do a factory reset, then there is no guarantee that the images will have been completely removed.
My husband's solicitor said that the police needs to find a physical copy of the indecent image on his mobile phone. His offence was on kik, too.
Post deleted by user