Truth Labs can ascertain whether a media file was created from a particular device or not, only when the suspected device is submitted for examination. The date and time of creation of a file cannot be ascertained to a physical date and time however, the same available in the file property or metadata of the file can be commented upon.