Mobile Forensics · Course 3
Timelines & Analysis
Decode timestamps and build timelines that hold up.
- 1Timestamps & Epochs12 min · One raw number, three possible dates. Learn to pick the right one.
- 2Building a Timeline13 min · Merge many sources into one honest timeline, all in UTC.
- 3App Usage Artifacts13 min · What screen time and notification records can show, and what they can't.
- 4Carrier Records & Cell Sites13 min · Call records, cell sites and the warrant rule from Carpenter.
- 5Challenge: The Late Night Message15 min · Decode, convert and weigh the evidence in an after-hours break-in.
Hands-on
Do it on the simulated phone
Every lesson has a lab you can try in your browser, plus questions that earn points toward the Timeline Builder badge.
Start lesson 1