The Cellebrite Physical Analyzer feature of verifying timestamps has been optimized to simplify and clarify digital investigations.

Timestamps can be confusing and difficult to navigate, but there is a simple way to understand them. Whenever a timestamp is listed, you can look at the highlights section at the bottom of the screen and choose a specific timestamp that will then be highlighted in the hex code.

From here, switch to “Values” and click the “Date & Time” option and you will see exactly how it is decoded in an understandable format. 

Share this post