EFTA01208372.pdf

• Menu o Overview o Device Details • NYCO24365.aff4 (Evidence ID: NYC024365.aff4 - 001) o Case Data • Calendar Items • Calls • Contacts • Messages • Top Contacts • User Accounts Case Data: Calls (101-200 of 677) Duration Service Direction Twe Date Contacts Status (HH:MM:SS) [I] FaceTime Outgoing Video 2019-04-01 Unknown 00:22:46 [2] 14:16:40 (UTC) [I] FaceTime Outgoing Video 2019-04-01 <Encrypted Blob> ( <Encr 00:22:46 [2] 14:16:40 (UTC) ypted Blob> ) [1] FaceTime Outgoing Video 2019-04-01 15:23:20 Unknown 00:07:50 [2] (UTC) [1] FaceTime Incoming Video 2019-04-01 15:40:00 (nc) Unknown 00:01:03 [2] [1] FaceTime Incoming Video 2019-04-01 15:40:00 Unknown 00:01:03 [2] (UTC) [1] FaceTime Outgoing Video 2019-04-01 16:30:00 Unknown 00:05:54 [2] (UTC) [1] FaceTime Outgoing Video 2019-04-01 16:30:00 <Encrypted Blob> ( <Encr 00:05:54 [2] (UTC) ypted Blob> ) [1] FaceTime Outgoing Video 2019-04-01nc) <Encrypted Blob> ( <Encr 16:46:40 o 00:02:14 [2] ypted Blob> ) [1] FaceTime Outgoing Video 2019-04-01nc) <Encrypted Blob> ( <Encr 16:46:40 o 00:02:14 [2] ypted Blob> ) [1] FaceTime Outgoing Video 26: 1646: 4 16:46:40 40 ( Unknown 00:01:26 [2] [1] FaceTime Outgoing Video 26: 1646: 4 16:46:40 40 ( <Encrypted Blob> ( <Encr 00:01:26 [2] ypted Blob> ) [1] FaceTime Incoming Video 2019-04-01 19:00:00 <Encrypted Blob> ( <Encr 00:00:00 Missed [2] (UTC) ypted Blob> ) 2019-04-03 <Encrypted Blob> ( <Encr [1] FaceTime Incoming Audio 11:51:26 aiTC) ypted Blob> ) 00:11:16 [1] FaceTime Outgoing Video 2019-04-04 Unknown 00:00:00 Cancelled [2] 09:46:40 (UTC) [1] FaceTime Incoming Video 2019-04-04 10:03:20 <Encrypted Blob> ( <Encr 00:00:00 [2] (UTC) ypted Blob> ) [1] FaceTime Incoming Video 2019-04-07 <Encrypted Blob> ( <Encr 00:12:03 [2] 10:16:40 (UTC) ypted Blob> ) EFTA01208372  2019-04-07 <Encrypted Blob> ( <Encr FaceTime Outgoing Video 00:01:14 10:16:40 (UTC) ypted Blob> ) 2019-04-07 -07 <Encrypted Blob> ( <Encr 00:12:03 FaceTime Incoming Video 10:16:40 (UTC) ypted Blob> ) 2019-04-07 FaceTime Outgoing Video Unknown 00:01:14 10:16:40 (UTC) 2019-04-07 <Encrypted Blob> ( <Encr 00:01:04 FaceTime Outgoing Video 10:33:20 (UTC) ypted Blob> ) 2019-04-07 <Encrypoted t ob> ( <Encr 00:01:04 FaceTime Outgoing Video 10:33:20 GHQ ypted mb> 2019-04-07 FaceTime Outgoing Video 10:33:20 arm Unknown 00:10:03 2019-04-09 FaceTime Incoming Video 10:36:40 arm Unknown 00:00:10 2019-04-09 <Encrypoted t ob> ( <Encr 00:00:00 FaceTime Outgoing Video 10:36:40 GHQ Cancelled ypted mb> 2019-04-09 yp<Etnedcr"Blotedb>B)lob> ( <Encr 00:00:00 FaceTime Incoming Video 10:36:40 Missed (UTC) 2019-04-09 FaceTime Incoming Video 10:36:40 arm Unknown 00:00:10 2019- 4-09 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 16: 010: 00 (UTC) ypted Blob> ) 2019-04-09 <Encrypted Blob> ( <Encr FaceTime Outgoing Video 16:43:20 00:08:45 (UTC) ypted Blob> ) 2019-04-09 <Encrypted Blob> ( <Encr FaceTime Outgoing Video 16:43:20 00:08:45 (UTC) ypted Blob> ) 2019-04-09 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video 16:43:20 Cancelled (UTC) ypted Blob> ) 2019-04-09 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Audio 16:47:59 Cancelled (UTC) ypted Blob> ) 2019-04-09 <Encrypted Blob> ( <Encr 00:00:00 [I] FaceTime Outgoing Audio 16:48:31 (um ypted Blob> ) Cancelled 2019-04-09 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Audio 22:05:04 arm Missed ypted Blob> ) 2019-04-10 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video Missed 11:36:40 (UTC) ypted Blob> ) 2019-04-10 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video Missed 13:16:40 (UTC) ypted Blob> ) 2019-04-12 <Encrypted Blob> ( <Encr FaceTime Incoming Video 00:01:08 11:23:20 (UTC) ypted Blob> ) 2019-04-12 FaceTime Incoming Video Unknown 00:01:08 11:23:20 (UTC) 2019-04-12 <Encrypted Blob> ( <Encr 00:02:33 FaceTime Incoming Video 11:40:00 (UTC) ypted Blob> ) 2019-04-12 <Encrypted Blob> ( <Encr 00:02:33 FaceTime Incoming Video 11:40:00 (UTC) ypted Blob> ) 2019-04-13 FaceTime Outgoing Video 14:20:00 arm Unknown 00:02:10 EFTA01208373  2019-04-13 <Encrypted Blob> ( <Encr 00:04:40 FaceTime Outgoing Video 14:20:00 (nt) ypted Blob> ) 2019-04-13 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video 14:53:20 (um Cancelled ypted Blob> ) 2019-04-13 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 15:43:20 Missed (UTC) ypted Blob> ) 2019-04-14 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 15:53:20 Missed (UTC) ypted Blob> ) 2019-04-14 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 21:10:00 (UTC) ypted Blob> ) 2019-04-15 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 15:13:20 (UTC) ypted Blob> ) 2019-04-17 <Encrypted Blob> ( <Encr 00:01:19 FaceTime Incoming Video 18:20:00 (UTC) ypted Blob> ) 2019-04-17 <Encrypted Blob> ( <Encr FaceTime Outgoing Video 18:20:00 (nt) 00:08:10 ypted Blob> ) 2019-04-18 FaceTime Outgoing Video 17:23:20 arm Unknown 00:00:49 2019-04-19 <Encrypted Blob> ( <Encr FaceTime Incoming Video 23:23:20 00:00:18 (UTC) ypted Blob> ) 2019-04-20 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video Missed 16:20:02 (UTC) ypted Blob> ) 2019-04-21 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 19:39:46 arm ypted Blob> ) 2019-04-21 <Encrypted Blob> ( <Encr FaceTime Outgoing Video 20:04:03 00:09:42 (UTC) ypted Blob> ) 20 20:13:56 <Encrypted Blob> ( <Encr 00:03:57 FaceTime Outgoing Video 20:13:56 ( ypted Blob> ) 2019-04-23 <Encrypted Blob> ( <Encr 00:03:11 FaceTime Incoming Video 22:12:07 (UTC) ypted Blob> ) 2019-04-24 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video Missed 18:21:14 (UTC) ypted Blob> ) 20 4-24 <Encrypted Blob> ( <Encr 00:01:36 FaceTime Incoming Video 18:21:43 (UTC) ypted Blob> ) 2019-04-24 <Encrypted Blob> ( <Encr 00:01:30 FaceTime Outgoing Video 18:23:37 (UTC) ypted Blob> ) 2019-04-24 <Encrypted Blob> ( <Encr 00:00:29 FaceTime Outgoing Video 18:25:27 (UTC) ypted Blob> ) 20 4-25 <Encrypted Blob> ( <Encr 00:15:14 FaceTime Outgoing Video 23:39:41 (UTC) ypted Blob> ) 04-26 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 2019-25: 16: 44 Missed (UTC) ypted Blob> ) 2019-04-26 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video 16:25:58 Cancelled (UTC) ypted Blob> ) 2019-04-26 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video 16:26:23 Cancelled (UTC) ypted Blob> ) 2019-04-26 <Encrypted Blob> ( <Encr 00:04:38 FaceTime Outgoing Video 16:26:36 (UTC) ypted Blob> ) EFTA01208374  20 4-27 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video Missed 15:39:40 (UTC) ypted Blob> ) 2019-04-29 <Encrypted Blob> ( <Encr 00:01:07 FaceTime Incoming Audio 20:09:52 (UTC) ypted Blob> ) 2019-04-30 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video 14:31:39 Cancelled (UTC) ypted Blob> ) 2019-05-01 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Audio 16:23:57 ont) Missed ypted Blob> ) 2019-05-01 <Encrypted Blob> ( <Encr 00:00:42 FaceTime Incoming Audio 17:22:01 arm ypted Blob> ) 2019-05-01 <Encrypted Blob> ( <Encr 00:01:56 FaceTime Incoming Audio 18:11:23 (UTC) ypted Blob> ) 2019-05-01 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Audio 18:47:49 Missed (UTC) ypted Blob> ) 2019-05-03 iPhone Outgoing Phone Unknown ( Unknown ) 00:02:16 (UTC) 2019-05-05 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 12:55:18 Missed (UTC) ypted Blob> ) 2019-05-05 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video Cancelled 12:56:11 (UTC) ypted Blob> ) 2019-05-06 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Audio 14:57:27 Missed (UTC) ypted Blob> ) 2019-05-06 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 18:23:32 (UTC) ypted Blob> ) 2019-05-10 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 14:19:42 (UTC) ypted Blob> ) 2019-05-10 <Encrypted Blob> ( <Encr 00:04:00 FaceTime Outgoing Video 14:22:28 (UTC) ypted Blob> ) 2019-05-13 2020:14:17 <Encrypted Blob> ( <Encr FaceTime Outgoing Video 00:21:24 (UTC) ypted Blob> ) 2019-05-14 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 11:18:54 (UTC) ypted Blob> ) 2019-05-14 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video Missed 20:48:21 (UTC) ypted Blob> ) 2019-05-16 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Audio 17:28:05 (UTC) ypted Blob> ) 2019-05-16 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 18:11:31 (UTC) ypted Blob> ) 2019-05-17 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 15:00:25 (UTC) ypted Blob> ) 2019-05-17 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 15:42:54 (UTC) ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 2019-05-17um 15:54:12 ( ypted Blob> ) 2019-05-17 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Audio 16:29:08 (um Cancelled ypted Blob> ) 2019-05-19 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 13:56:25 (UTC) ypted Blob> ) EFTA01208375  2019-05-23 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 09:52:40 (UTC) ypted Blob> ) 2019-05-23 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 10:00:59 (UTC) ypted Blob> ) 2019-05-23 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 10:04:53 (UTC) ypted Blob> ) 2019-05-23 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 10:13:15 (UTC) ypted Blob> ) 2019-05-24 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video 15:30:30 Cancelled (UTC) ypted Blob> ) 2019-05-24 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 15:30:57 (UTC) ypted Blob> ) 2019-05-25 <Encrypted Blob> ( <Encr 00:00:13 FaceTime Incoming Video 10:15:52 (UTC) ypted Blob> ) 2019-05-25 FaceTime Incoming Video 10:19:31 Unknown 00:04:53 (UTC) 2019-05-25 <Encrypted Blob> ( <Encr FaceTime Incoming Video 00:03:11 10:24:41 (UTC) ypted Blob> ) 2019-05-26 <Encrypted Blob> ( <Encr FaceTime Outgoing Video 00:00:00 Cancelled 11:33:32 (UTC) ypted Blob> ) 2019-05-26 <Encrypted Blob> ( <Encr 00:15:34 FaceTime Outgoing Video 11:34:03 (UTC) ypted Blob> ) 2019-06-03 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video Cancelled 10:21:08 (UTC) ypted Blob> ) Notes [1] Source Device NYC024365.aff4/Macintosh HD [1] Source File /Users/Jeffrey/Library/Application Support/CallHistotyDB/CallHistory.storedata [2] Recovered Record Case Data: Calls (1-100 of 677) Case Data: Calls (201-300 of 677) EFTA01208376