A temporal gap or 'void' in a device's recorded activity during a relevant time window can itself be treated as inculpatory evidence and prompt investigators to focus forensic analysis on that period.
high
procedural
Significance of missing data in digital forensic timelines