The HomeDomain plist files

The following are the HomeDomain plist files, which contain data that may be relevant to your investigation:

  • /private/var/mobile/Library/Preferences/com.apple.mobilephone.plist: This contains the last phone number entered into the keypad regardless of whether it was dialed or not
  • /private/var/mobile/Library/Preferences/com.apple.mobilephone.speeddial.plist: This contains a list of the contacts that were added to the phone's favorites list
  • /private/var/mobile/Library/Preferences/com.apple.AppSupport.plist: This contains the country code that was used for the App Store on the device
  • /private/var/mobile/Library/Preferences/com.apple.Maps.plist: This contains the last latitude, longitude, and address pinned in the ...

Get Practical Mobile Forensics - Third Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.