SANS Digital Forensics and Incident Response Blog: Tag - update

iOS Location Mapping with APOLLO Part 1: I Know Where You Were Today, Yesterday, Last Month, and Years Ago!

I added preliminary KMZ (zipped KML) support toAPOLLO. If anyAPOLLOmodule's SQL query has "Location" in its Activity field, it will extract the location coordinates in the column "Coordinates" as long as they are in Latitude, Longitude format (ie: 38, -77). These are more a less an upgrade/replacement from my previous iOS location scripts. (FYI: Those will not likely be updated further.)