From TT
JB - moment of connection, creation time exists, no earlier edit time when I actually wrote it.
CE - you said not possible to have earlier edit dates, look at sc sh both you and PD agree no valid tech explanation for phenomenon
JB - not possible, tried changing phone times and dates it's not possible.
Fifer : whit Speccielock Halmes is saying, is when you've eliminated the impossible, what remains must be the fuckin truth ken.
CE - can you explain how these screenshots are poss
JB - scsh 20 for eg, reports a version hist of...
J - hang on
JB - scsh20 porports note edited on
CE - can I break it down, note below it?
JB - starts alpha med, the one where version hist show 21aug edit date, slightly diff colour, and creation on 26oct. Only way to make it look that way is the version hist is superimposed. Not a note ass with google keep
CE - anything else on 20 that looks like superimposition
JB - yes version hist, and not possible to have date with that edit time.
Fifer : OH NUT. DEH TELL AYS THIT IT IS EFTIR AW POSSIBLE TAE EDIT A DIGITAL PICTUR FILE! JIST IMAGINE THE TECHNOLOGY NEEDIT TAE DAE SIK A HING?
CE - onto 3rd category, requirement for forensic review of device. 1695 - starts, at time of writing, see that? talk about recording of meeting, why helpful?
JB - best way to present any exam of phone, computer etc to sit in person, or this way you record to show
Fifer : Aye so here he's gonnae run us doon the big List Of Weys A Loddie Wi An Actual Forensic Backgroon Wid Dae A Guid Job.