Type iOS Routine Locations Database

<< Details >>

Defined Constant	Type_iOS_Routine_Locations_Database
File Type Value	1040
Parent Type	SQLite
Carve	Yes
Format Details	Yes
MIME Type	application/vnd.sqlite3
Filename Extension	sqlite
Typical Filename	Cache.sqlite

iOS Routine Locations

Description

iOS Routine Locations Database

Truxton Exploiters

This file type is handled by the following ETLs:

• Expand

Items Produced

Truxton will extract the following from this file type:

• EVENT_TYPE_HEARD_WIFI
• LOCATION_TYPE_WIFI_HARVEST
• ENTITY_TYPE_MAC_ADDRESS
• Type_File_Details
• Type_KML - Which holds track log information
• Type_SQLite_Sample

Filenames Seen

• Cache.sqlite
• Local.sqlite