iPhone Forensics Analyst or EXIF Specialist Needed
Budget: $30 – $250 USD
Looking for an experienced iPhone forensics analyst or EXIF expert.
I’m not very tech‑savvy, but I recently learned that photos store information like timestamps. .
Here’s what I’ve noticed:
Recently, I found something in the metadata that might show the real capture times, and I’d love to know if I’m reading it correctly.
Photo #1 — My “Anchor”
I was physically with this person at 7:59 AM when they took a photo and sent it to me immediately.
I received it at 8:00 AM, so I know this timestamp is accurate.
The metadata shows: Runtime Since Power Up: 4 days 12:00:24
Photo #2
I received this one at 1:33 PM.
Metadata shows: Runtime Since Power Up: 4 days 16:05:46
Comparing it to the anchor photo, it looks like this picture was actually taken around 12:04 PM, not at 1:33 PM.
Photo #3
I received this one at 3:20 PM.
Metadata shows: Runtime Since Power Up: 4 days 17:24:23
Using the same comparison, this photo seems to have been taken around 1:24 PM, not 3:20 PM.
I would like someone to simply look the the exif/metadata on two photos and compare to a rock solid anchor photo. Just evaluate the “Runtime Since Power Up”and the timestamp. That’s it and it’s that simple.
I believe if the phone hasn’t been powered off, can I use that runtime value (along with my anchor photo) to figure out when the later photos were actually taken.
Any help from people familiar with EXIF or mobile forensics would be greatly appreciated.
I’m not very tech‑savvy, but I recently learned that photos store information like timestamps. .
Here’s what I’ve noticed:
Recently, I found something in the metadata that might show the real capture times, and I’d love to know if I’m reading it correctly.
Photo #1 — My “Anchor”
I was physically with this person at 7:59 AM when they took a photo and sent it to me immediately.
I received it at 8:00 AM, so I know this timestamp is accurate.
The metadata shows: Runtime Since Power Up: 4 days 12:00:24
Photo #2
I received this one at 1:33 PM.
Metadata shows: Runtime Since Power Up: 4 days 16:05:46
Comparing it to the anchor photo, it looks like this picture was actually taken around 12:04 PM, not at 1:33 PM.
Photo #3
I received this one at 3:20 PM.
Metadata shows: Runtime Since Power Up: 4 days 17:24:23
Using the same comparison, this photo seems to have been taken around 1:24 PM, not 3:20 PM.
I would like someone to simply look the the exif/metadata on two photos and compare to a rock solid anchor photo. Just evaluate the “Runtime Since Power Up”and the timestamp. That’s it and it’s that simple.
I believe if the phone hasn’t been powered off, can I use that runtime value (along with my anchor photo) to figure out when the later photos were actually taken.
Any help from people familiar with EXIF or mobile forensics would be greatly appreciated.