Information Technology Reference
In-Depth Information
database is used. These databases contain location information for cell towers that the
device came into close proximity with as well as Wi-Fi networks that were available for
the device to connect to. These databases are often used to place a person near a specific
location as this data is cached to one of these database files without the user's consent.
For this example, we will examine the
consolidated.db
file. The
CompassCalib-
ration
table in the
consolidated.db
file contains the location information along
with the timestamps. The file, when opened with SQLite Professional, displays the data as
shown in the following screenshot. Note that the
cache_encryptedA.db
file is no
longer backed up when the user syncs with iTunes.
The Consolidated.db view with SQLite Professional
Voicemail
The
voicemail
database contains metadata about each voicemail stored on the device
that includes the sender's phone number, callback number, timestamp and message dura-
tion, and more. The voicemail recordings are stored as
AMR
audio files that can be played
by any media player that supports the AMR codec (for example,
QuickTime Player
). The
