So here we're going to take a look at this.
I'm using iBackupBot, because it was quick.
I literally wanted just to test this.
I plug in my iPhone.
I select Raw File System, so not Tools.
And I went out to DCIM and 100APPLE just to take a look.
I find that image, the 1356, and then I export it out
and I took a look at this.
So I took a look at this using ExifTool.
And down here I could see 1/24/2022 at 08:16:26.
So I saw the real time.
So if we go back a slide, we are going to see here image 1356.
It knows the truth.
So you're like, that's interesting.
What the user sees may look different than what
the truth is that's hiding in that EXIF data.
So some of the real data is going to be preserved.
Now, the location can get very messy.
You may see what it was adjusted to versus what it was.
So just make sure you're reading the articles on this.
You try it yourself.
This test right here maybe took me five minutes,
only because I was documenting what I was changing it to.
And again, my iPhone is not jailbroken.
I just connected it, trusted it, went through these steps,
and this was a very quick way to do research and validation
without having to do an entire acquisition of the device.