Yes. So Cellebrite should be writing the data to write-once storage prior to performing any analysis of the content. In absence of write-once media, they are b

Yes. So Cellebrite should be writing the data to write-once storage prior to performing any analysis of the content. In absence of write-once media, they are betting that the hashes they capture will be the same every time they image the device because they never modify the device.