Comments (9)
jfarley248
commented on August 13, 2024
Hi, thank you for letting me know. I'm going to take a peak into how pymobiledevice handles timestamps during the extraction.
from meat.
jfarley248
commented on August 13, 2024
@Lou511 Could you also tell me the commercial tools you used so I can test as well? Thanks again
from meat.
Lou511
commented on August 13, 2024
Hi Jack. No problem. I used Cellebrite PA and Axiom. Let me know if you
want me to send you screenshots.
…On Wed, May 6, 2020 at 12:25 PM Jack Farley ***@***.***> wrote:
@Lou511 <https://github.com/Lou511> Could you also tell me the commercial
tools you used so I can test as well? Thanks again
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
<#4 (comment)>, or
unsubscribe
<https://github.com/notifications/unsubscribe-auth/ADFINU4QFY4CBRQR6CGNNMLRQGFQBANCNFSM4MYV6LJQ>
.
from meat.
jfarley248
commented on August 13, 2024
Screenshots would be great. And both tools are showing the same timestamps?
I'm digging through the code and I do see some possible fixes
from meat.
jfarley248
commented on August 13, 2024
I think I may add support for AFF4 which will have much more support for preserving timestamps... (Jessica Hyde suggested AFF4) Changing directories modified timestamps is a bit weird on Python since the folders aren't in a container, but files may be easier to make the timestamps preserved
from meat.
Lou511
commented on August 13, 2024
Let me pull up the test data in both tools, and respond with the timestamps
in front of me. I'll send you those screenshots, though.
…On Wed, May 6, 2020 at 12:48 PM Jack Farley ***@***.***> wrote:
Screenshots would be great. And both tools are showing the same timestamps?
I'm digging through the code and I do see some possible fixes
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
<#4 (comment)>, or
unsubscribe
<https://github.com/notifications/unsubscribe-auth/ADFINU2G7GZZQR73AQEFRSDRQGIGRANCNFSM4MYV6LJQ>
.
from meat.
Lou511
commented on August 13, 2024
Interesting. I have been searching for a container that will preserve
timestamps. Thing is, I had an issue with ACQUIRE preserving timestamps.
It seems there is an issue with timestamps for FFS extractions (only
modified timestamps were showing), and for logical extractions, as well
(all timestamps for directories were being updated, but not for files). In
addition, the timestamp issue seemed to only affect the Media directory -
thought, this was my only area of focus in the first place. Not sure if
other directories were being affected.
I tried pulling data from my test device using tar, and encountered issues
for FFS extractions - only the modified timestamps were showing. I don't
know how Cellebrite used to do it - I believe they used to
preserve timestamps using .tar.
…On Wed, May 6, 2020 at 12:59 PM Jack Farley ***@***.***> wrote:
I think I may add support for AFF4 which will have much more support for
preserving timestamps... (Jessica Hyde suggested AFF4) Changing directories
modified timestamps is a bit weird on Python since the folders aren't in a
container.
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
<#4 (comment)>, or
unsubscribe
<https://github.com/notifications/unsubscribe-auth/ADFINU6N4GXIMO34VQRO6SLRQGJO3ANCNFSM4MYV6LJQ>
.
from meat.
Lou511
commented on August 13, 2024
Hi Jack. Sorry for the delay. Attached are two screenshots showing the
timestamps I mentioned. Axiom does show additional columns showing true
timestamps.
…On Wed, May 6, 2020 at 12:59 PM Jack Farley ***@***.***> wrote:
I think I may add support for AFF4 which will have much more support for
preserving timestamps... (Jessica Hyde suggested AFF4) Changing directories
modified timestamps is a bit weird on Python since the folders aren't in a
container.
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
<#4 (comment)>, or
unsubscribe
<https://github.com/notifications/unsubscribe-auth/ADFINU6N4GXIMO34VQRO6SLRQGJO3ANCNFSM4MYV6LJQ>
.
from meat.
jfarley248
commented on August 13, 2024
Hi again, just updated the code to change the modify times on both windows and linux, and on Windows the birth time is set as the creation time
from meat.
Related Issues (3)
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from meat.