Find out files transfered via Bluetooth
Posted Pieces0310
tags:
篇首语：本文由小常识网(cha138.com)小编为大家整理，主要介绍了Find out files transfered via Bluetooth相关的知识，希望对你有一定的参考价值。
The case was about business secret and forensic guy did a physical acquisition from a smart phone. He\'d like to find out files relates to sensitive data by examining the image file.
A file named "top-secret.docx" draw forensic guy\'s attention. Bingo there\'s lots of classified data inside this document.
Where did this files come from? In which way? Who sent this file? Take a look at the path and you\'ll know what\'s going on. This file was transfered via Bluetooth! All three timestamp including the creation time, accessed time and modified time are "2016/05/11 11:01:20 UTC". That means this file "top-secret.docx" was transfered to this volume on the smart phone at local time "2016/05/11 19:01:20". Also we could know the create date/time and the last person who modified this document. The "path" of a file is usually a useful hint to forensic guys.
以上是关于Find out files transfered via Bluetooth的主要内容，如果未能解决你的问题，请参考以下文章
zend, Zend_File_Transfer_Adapter_Http() 不移动文件