±Forensic Focus Partners

Become an advertising partner

±Your Account


Forgotten password/username?

Site Members:

New Today: 0 Overall: 35503
New Yesterday: 0 Visitors: 99

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Webinars

Apple Carplay / Android Auto

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts


Apple Carplay / Android Auto

Post Posted: Jan 29, 19 13:35

I am currently in the process of completing a project regarding Apple CarPlay and Android Auto from a forensic point of view.
The aim is to find evidence of use of these systems during the time of an incident.

I have currently been able to find two key files:
- Apple Carplay.plist - Which I believe to hold creation date and modified date as for when the phone was first registered with the carplay system.
- Apple Internal.carkitd.plist - Which stores a creation and modified date. These could be the date the mobile phone was used with CarPlay but I am unable to say this for definite.

I have not yet looked at an Android device but I assume I will find more relevant files than Apple devices.

If anyone has dealt with, or has further files worth investigating in regards to Apple Carplay then please let me know.


Page 1 of 1