Common questions
- When was a photo or video created
- Was a file edited or moved
- What does phone activity show around a key event
- Do messages or account records support the timeline
- Can location related artifacts be evaluated
- Are screenshots enough to rely on