{"id":917,"date":"2010-03-17T00:00:00","date_gmt":"2010-03-17T00:00:00","guid":{"rendered":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/2010\/03\/17\/forensics-for-gps-unit\/"},"modified":"2021-12-30T11:38:23","modified_gmt":"2021-12-30T11:38:23","slug":"forensics-for-gps-unit","status":"publish","type":"post","link":"https:\/\/www.cybersecurityinstitute.com\/blog\/?p=917","title":{"rendered":"Forensics for GPS Unit"},"content":{"rendered":"<p>Blackthorn2 &#8211; http:\/\/www.blackthorn2.com\/<\/p>\n<p><u>TomTom<\/u><br \/>\nForensic Analyser &#8211; TomTom Edition &#8211; http:\/\/www.gpsforensics.org\/reviews_forensicanalyzer.html &#8211; company seems to be dead<br \/>\nTomTology &#8211; http:\/\/www.forensicnavigation.com\/#\/products\/4527490520<br \/>\nEnCase Enscript &#8211; can parse TomTom files once they have been recovered from a device<br \/>\nXACT &#8211; http:\/\/www.msab.com\/<\/p>\n<p><u>Garmin<\/u><br \/>\nDevice Seizure http:\/\/www.paraben.com\/catalog\/product_info.php?cPath=25&#038;products_id=405<br \/>\nGarminGPXCurrent.gpx is an text file that contains trips details<\/p>\n","protected":false},"excerpt":{"rendered":"<p><b><u>Cross Product<\/u><\/b><br \/>\n<b>Blackthorn2<\/b><br \/>\nFor forensics acquisition, examination and analysis platform for various platforms including Garmin, TomTom, and Magellan:<br \/>\nI like this product since it provides forensic quality data (including hashes).<br \/>\nPricing:  Being requested.<\/p>\n<p><b>Device Seizure<\/b><br \/>\n\u2022\tGPS Waypoints, Tracks, Routes&#8230;<br \/>\nPrice: USD 199 per license <\/p>\n<p><b><u>TomTom Specific<\/u><\/b><\/p>\n<p><b>TomTology<\/b><br \/>\nDecoding of live data providing:<br \/>\n\u00a0            Home Location<br \/>\n\u00a0        \tFavourites<br \/>\n\u00a0       \tRecent Destinations<br \/>\n\u00a0       \tLast Journey Start and End Point (where available)<br \/>\n\u00a0           Stored Phonebook<br \/>\n\u00a0           Called Phone Numbers<br \/>\n\u00a0       \tReceived Phone Numbers<br \/>\n\u00a0            Sent SMS Messages<br \/>\n\u00a0            Received SMS Messages<br \/>\n\u00a0            Location where TomTom was turned off<\/p>\n<p>\u2022\tRetrieving of deleted journeys from unallocated space proving same details as above for all recovered.<\/p>\n<p>\u2022\tLocating deleted phone numbers<\/p>\n<p>\u2022\tLocating deleted SMS Messages<\/p>\n<p>Price: USD 250 per license<\/p>\n<p><b>XACT<\/b><br \/>\nRetrieves location data.<\/p>\n<p>Pricing: Being requested.<\/p>\n<p><u>Not tools but useful pages of info:<\/u><br \/>\n<a href=\"http:\/\/www.forensicfocus.com\/tomtom-gps-device-forensics\" title=\"Tom Tom GPS Forensics\">Tom Tom GPS Forensics<\/a><br \/>\n<a href=\"http:\/\/www.sciencedirect.com\/science?_ob=ArticleURL&#038;_udi=B7CW4-4SVC5P5-1&#038;_user=10&#038;_coverDate=09%2F30%2F2008&#038;_rdoc=1&#038;_fmt=high&#038;_orig=search&#038;_sort=d&#038;_docanchor=&#038;view=c&#038;_searchStrId=1253925758&#038;_rerunOrigin=google&#038;_acct=C000050221&#038;_version=1&#038;_urlVersion=0&#038;_userid=10&#038;md5=a7c5a0494ef5b71763f05994fb9ddcd8#implicit0\" title=\"Digital Forensics\">Pinpointing TomTom location records: A forensic analysis<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[29],"tags":[],"class_list":["post-917","post","type-post","status-publish","format-standard","hentry","category-news"],"_links":{"self":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/917","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=917"}],"version-history":[{"count":1,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/917\/revisions"}],"predecessor-version":[{"id":3404,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/917\/revisions\/3404"}],"wp:attachment":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=917"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=917"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=917"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}