Guide
MacOS Spotlight And Metadata Deep Dive
17 pages · 26 min read
- Apple and macOS forensics
- Metadata and timestamps
§ Guide topic
Metadata and timestamps
7 practical guides on metadata and timestamps for UK litigators, in-house counsel and investigators. Read every page online or download the PDF, free and without registration.
Ref · E-D · 2026 · §TPCClass · ConfidentialJuris · England & WalesStatus · Active
7 practical guides on metadata and timestamps, written for UK litigators, in-house counsel and investigators handling disclosure and digital evidence, and every guide can be read in full on its own page or downloaded as a PDF, free and without registration.
§ Questions visitors ask about metadata and timestamps
§ 7 guides on metadata and timestamps
Ask The Library about Metadata and timestampsGuide
IOS Photos Media And Location Metadata
17 pages · 25 min read
- Metadata and timestamps
Guide
Android Photos Media And Metadata
18 pages · 26 min read
- Mobile and messaging evidence
- Metadata and timestamps
Guide
Detecting Backdated Or Manipulated Documents
17 pages · 25 min read
This guide, 'Detecting Backdated or Manipulated Documents', provides a forensic exam in at i on of documents that claim a date they did not have.
- Metadata and timestamps
Guide
Can File Timestamps Be Trusted
17 pages · 24 min read
This guide, 'Can File Timestamps Be Trusted?', is for UK lawyers, in-house counsel, and investigators.
- Metadata and timestamps
Guide
Proving Who Created Or Edited A Document
17 pages · 23 min read
This guide, 'Proving Who Created Or Edited A Document', is for UK lawyers, in-house counsel, and investigators.
- Metadata and timestamps
Guide
Metadata For Lawyers What It Can And Cannot Prove
17 pages · 21 min read
This guide, 'Metadata for Lawyers: What It Can and Cannot Prove', is prepared by Computer Forensics Lab's e-discovery team for UK litigators, in-house counsel, and investigators.
- Metadata and timestamps
§ Other topics
- Mobile and messaging evidence (24)
- Forensic collection and imaging (21)
- Electronic disclosure practice (20)
- Apple and macOS forensics (14)
- Deleted data and recovery (13)
- Cloud evidence (10)
- Chain of custody and defensibility (8)
- Servers, NAS and virtual environments (8)
- Custodians and data mapping (7)
- Expert evidence and reports (7)
- Open source, web and log evidence (7)
- Encryption and access (6)
- Data theft and exfiltration (5)
- Disclosure and PD 57AD (5)
Instruct the practice
Bring us in early.
Defensibility is built, not retrofitted.
Whether you are responding to a regulator, preparing for disclosure, or scoping an internal investigation, start the chain of custody with a short, confidential conversation.