±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35251
New Yesterday: 4 Visitors: 158

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Webinars

Apple Carplay / Android Auto

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

Bellis
Newbie
 

Apple Carplay / Android Auto

Post Posted: Jan 29, 19 06:35

Hello,
I am currently in the process of completing a project regarding Apple CarPlay and Android Auto from a forensic point of view.
The aim is to find evidence of use of these systems during the time of an incident.

I have currently been able to find two key files:
- Apple Carplay.plist - Which I believe to hold creation date and modified date as for when the phone was first registered with the carplay system.
- Apple Internal.carkitd.plist - Which stores a creation and modified date. These could be the date the mobile phone was used with CarPlay but I am unable to say this for definite.

I have not yet looked at an Android device but I assume I will find more relevant files than Apple devices.

If anyone has dealt with, or has further files worth investigating in regards to Apple Carplay then please let me know.

Thanks,
Ryan  
 

Page 1 of 1