Summary

In this chapter, we learned all about location artifacts and how an investigator can benefit from analyzing such data.

First, we introduced the Location Services API. Then, we learned how A-GPS uses multiple technologies to figure out a device's position, such as satellite GPS, Wi-Fi, and cell towers. We learned how iOS manages Significant Locations and where this data is stored.

Later on in the chapter, we focused on the most popular location-related databases found on an iOS device. We learned which are the most data-rich tables and how the data is organized in different columns. Then, we learned how to extract location data by running SQL queries. We learned about the different accuracy levels that can be found in routined data versus harvested location data.

Finally, in the last section of this chapter, we went through the steps required to view location artifacts in Cellebrite Physical Analyzer and Apollo, an open source tool that greatly simplifies the process...