Type iOS Call History

<< Details >>

Defined Constant	Type_iOS_Call_History
File Type Value	276
Parent Type	SQLite
Carve	Yes
Format Details	Yes
MIME Type	application/vnd.sqlite3
Filename Extension	sqlite
Typical Filename	CallHistory.storedata

iPhone Call History

Description

iPhone Call History database

Truxton Exploiters

This file type is handled by the following ETLs:

• Expand

Items Produced

Truxton will extract the following from this file type:

• ENTITY_TYPE_ACCOUNT
• ENTITY_TYPE_EMAIL_ADDRESS
• ENTITY_TYPE_PHONE_NUMBER
• EVENT_TYPE_INCOMING_FACETIME
• EVENT_TYPE_MADE_A_CALL
• EVENT_TYPE_MISSED_PHONE_CALL
• EVENT_TYPE_OUTGOING_FACETIME
• EVENT_TYPE_RECEIVED_A_CALL
• EVENT_TYPE_UNKNOWN_PHONE_CALL
• Type_File_Details
• Type_SQLite_Sample

Filenames Seen

• CallHistory.storedata
• CallHistoryTemp.storedata
• 5a4935c78a5255723f707230a451d79c540d2741