ZEKASTRA case pack VP-02 - extraction log - SYNTHETIC TRAINING DATA
Case reference ..... TF-2026-0306 (invented)
Handset ............ generic Android phone (invented), found powered off
Extraction ......... file-system extraction on 2026-03-09 08:20:11 (examiner station clock, local time UTC+03:00)
Source directory ... /data/data/org.example.chatstore/databases/ (invented package name)

Directory listing at extraction (times from the phone's file system, UTC):
  chatstore.db       32768 bytes   last modified 2026-03-06 06:58:12
  chatstore.db-wal   226632 bytes   last modified 2026-03-06 07:46:31
  (no chatstore.db-shm in the listing)

Copy method: read-only copy of each file to the examination medium. The originals on the extraction image
were not opened with a database tool.