Take the State of DFIR Survey Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey

Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →
SAMSUNG GALAXY 3 - ...
 
Notifications
Clear all

SAMSUNG GALAXY 3 - Location of Wifi Connections

3 Posts
2 Users
0 Reactions
1,174 Views
UnallocatedClusters
(@unallocatedclusters)
Honorable Member
Joined: 15 years ago
Posts: 576
Topic starter   [#13133]

Hello,

I am investigating the following device

Samsung Galaxy Tab 3 (Wifi only - no 3G)
MODEL SM-T210R
VERSION Android 4.4.2

I have rooted the device and was able to make a full image.

The device was allegedly stolen from my client's home and I need to create a timeline of dates and locations the device was used.

I have extracted out GPS data from several photos and video files so far, which may be helpful.

I am looking for the file that holds wifi connection data such as the network name and times/dates the device viewed and/or connected to those networks.

Any help would be greatly appreciated -

Larry



   
Quote
(@bithead)
Noble Member
Joined: 22 years ago
Posts: 1206
 

Android WiFi settings location depends on the manufacturer, but in general Samsung uses
Samsung Galaxy Pocket, S2, S3 /data/misc/wifi/wpa_supplicant.conf
Samsung Tab /data/wifi/bcm_supp.conf



   
ReplyQuote
UnallocatedClusters
(@unallocatedclusters)
Honorable Member
Joined: 15 years ago
Posts: 576
Topic starter  

BitHead - thanks for the tip.

I recovered the "bcm_supp.conf" file but did not see dates and times of network connections. Am I missing them and need to look closer?

I see an application in the Google Play market called Wifi History by Androb that recovers and reports on "Recent Connections"(https://play.google.com/store/apps/details?id=org.rjj.android.wifimonitor).

This Wifi connection history is the information I am looking for.

Do you think the Wifi History application is reading from the "bcm_supp.conf" file or a different file from within an Android device?

Many thanks for your expert guidance.

Regards,

Larry



   
ReplyQuote

Enterprise Partners

  • celebrite-logo
  • atola-logo
  • semantics21 2026 FF logo
  • MagnetForensics_ForensicFocus

Partners

  • gmdsoft-logo
  • logo Belkasoft 135x100
  • detego-logo
  • ADF
  • Aid4Mail-Logo
  • Logo_MSAB_Black (2)

Academic Partners

  • University of Southampton logo 2
Share: