Chapter 6: Dissecting Location Data

In the previous chapter, we learned all about pattern-of-life artifacts that can be found on iOS devices, such as application usage and system events, and how to manually analyze databases and logs. In this chapter, we will focus on one of the most interesting types of data that can be found on a mobile device, which is location data.

Mobile devices store a wealth of location data, such as data pertaining to cell towers, Wi-Fi networks, and Bluetooth devices that come into close proximity with the device. Location artifacts can also be extracted from third-party applications or multimedia files.

We'll start the chapter by learning what location data is, how a device determines its position, and where this ...

Get iOS Forensics for Investigators now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.