±Your Account
Membership:
New Today: 0
New Yesterday: 4
Overall: 24209
Visitors: 54±Latest Webinar
±Latest Articles
· Android Forensics
· Geo-tagging & Photo Tracking On iOS
· KS – an open source bash script for indexing data
· Mobile Device Geotags & Armed Forces
· Categorization of embedded system forensic collection methodologies
· Interpretation of NTFS Timestamps
· What are ‘gdocs’? Google Drive Data – part 2
· What are ‘gdocs’? Google Drive Data
· Bad Sector Recovery
· Forensic Artifact: Malware Analysis in Windows 8
· Geo-tagging & Photo Tracking On iOS
· KS – an open source bash script for indexing data
· Mobile Device Geotags & Armed Forces
· Categorization of embedded system forensic collection methodologies
· Interpretation of NTFS Timestamps
· What are ‘gdocs’? Google Drive Data – part 2
· What are ‘gdocs’? Google Drive Data
· Bad Sector Recovery
· Forensic Artifact: Malware Analysis in Windows 8
±Follow Us
±Latest Jobs
Back to top
Skip to content
Skip to menu
Back to top
Back to main
Skip to menu
Go to page 1, 2, 3, 4, 5 Next
Have you emailed the Apple store to see how many Apps on their database are described as obtaining or using geographic data?
_________________
Institute for Digital Forensics (IDF) - LinkedIn
Mobile Telephone Examination Board (MTEB) - LinkedIn
Mobile Telephone Evidence & Forensics trewmte.blogspot.com
ForensicMobex now MTEB Linkedin Subgroup
Assuming that 'Location Services' is turned on
(I believe 'on' is the default setting in OS 3.0+)
Last edited by Doug on Mon Nov 15, 2010 6:10 am; edited 1 time in total
Geographic data as evidence from iPhone/iPod dumps & backups
Geographic data as evidence from iPhone/iPod dumps & backups
Posted: Sat Nov 13, 2010 10:07 am
I am currently researching geographic data from Apple handheld digital devices. This may be geographic evidence generated by certain apps or processes etc. I am trying to collate a list of as many examples as possible to research, so if anyone has any ideas or experiences of this then I'd be really grateful.
-

Redcelica67 - Senior Member
Re: Geographic data as evidence from iPhone/iPod dumps & bac
Posted: Sat Nov 13, 2010 3:14 pm
iPhones primarily use.longitude and latitude I have.developed a tool to.read this information and plot it on a map based on the co-ordinates the data is stored on sqlite3 databases and contains things like picture locations,wifi networks the iPhone detected, and also cell tower locations and coordinates. I can provide more info if you.like feel free to.send.specific questions to ryan.manley @ wiseforensics.com
-

xaberx - Senior Member
Re: Geographic data as evidence from iPhone/iPod dumps & backups
Posted: Sun Nov 14, 2010 3:25 am
- Redcelica67I am trying to collate a list of as many examples as possible to research
Have you emailed the Apple store to see how many Apps on their database are described as obtaining or using geographic data?
_________________
Institute for Digital Forensics (IDF) - LinkedIn
Mobile Telephone Examination Board (MTEB) - LinkedIn
Mobile Telephone Evidence & Forensics trewmte.blogspot.com
ForensicMobex now MTEB Linkedin Subgroup
-

trewmte - Senior Member
Re: Geographic data as evidence from iPhone/iPod dumps & bac
Posted: Sun Nov 14, 2010 2:37 pm
Pictures taken by iPhones have the GPS coordinates in their EXIF data.
_________________
alexbarnett.com
Chat Sniper licenses are 50% off for members of Forensic Focus. Use coupon code FF50 during checkout. Thanks for helping me test!
_________________
alexbarnett.com
Chat Sniper licenses are 50% off for members of Forensic Focus. Use coupon code FF50 during checkout. Thanks for helping me test!
-

agbarnet - Senior Member
Re: Geographic data as evidence from iPhone/iPod dumps & bac
Posted: Sun Nov 14, 2010 3:40 pm
You can download 'exiftool' from the internet and use this 'start.cmd' file I created:
@echo off
CLS
echo This tool creates an output.kml file from images suitable to map
echo in Google Earth.
echo Starting path will be: %~p0
echo and processing recursive directories.
echo If not correct press CTRL + C otherwise
pause
exiftool -r -k -if "$gpslatitude" -p kml.fmt -d %Y-%m-%dT%H:%M:%SZ %~p0 > output.kml
@echo off
CLS
echo This tool creates an output.kml file from images suitable to map
echo in Google Earth.
echo Starting path will be: %~p0
echo and processing recursive directories.
echo If not correct press CTRL + C otherwise
pause
exiftool -r -k -if "$gpslatitude" -p kml.fmt -d %Y-%m-%dT%H:%M:%SZ %~p0 > output.kml
-

Biedubbeljoe - Member
Re: Geographic data as evidence from iPhone/iPod dumps & bac
Posted: Mon Nov 15, 2010 4:20 am
- agbarnetPictures taken by iPhones have the GPS coordinates in their EXIF data.
Assuming that 'Location Services' is turned on
(I believe 'on' is the default setting in OS 3.0+)
Last edited by Doug on Mon Nov 15, 2010 6:10 am; edited 1 time in total
-

Doug - Senior Member
Re: Geographic data as evidence from iPhone/iPod dumps & backups
Posted: Mon Nov 15, 2010 4:43 am
Really helpful so far guys, thanks. iPhone Apps that leave a latitude/longitude footprint after use are particularly interesting to me also
-

Redcelica67 - Senior Member
















