Beyond the Map: Validating and Hunting Hidden Location Data in Mobile Forensics
Abstract Proposal: Mobile devices are goldmines of location data. Automated mobile forensics tools frequently generate false positives in location data. Unreliable locations and cached applications can place a suspect at a crime scene they never visited. This session goes beyond standard maps to explore SQLite databases in their raw form. Participants will learn to critically assess the reliability of coordinates, distinguishing device presence from system noise. We will demonstrate a practical methodology for searching undiscovered location sources in unsupported applications and cross-referencing log information to build a robust and reliable timeline.
