Discover and read the best of Twitter Threads about #mobileforensics
Most recents (1)
1\ #MobileForensics Tip: Did you know iOS, by default, tracks all locations that you visit to build a map of your life.
Artefacts:
> cache.sqlite
> cloud.sqlite
> local.sqlite
Tracked by IoS:
> When you arrived
> When you left
> Long/Lat
😝Photo is a parsed local.sqlite file
Artefacts:
> cache.sqlite
> cloud.sqlite
> local.sqlite
Tracked by IoS:
> When you arrived
> When you left
> Long/Lat
😝Photo is a parsed local.sqlite file
2\ In your iPhone the local.sqlite will render like this - as you can see I went to a grocery store 13 times. I was in lockdown don’t judge me.
3\ You can parse these using DB browser for sqlite - there are field names including longitude, latitude and also tracks when you arrived / left so it understands your dwell time. There are also fields pertaining to vehicle events i.e. you parked your car.
