cheeky4n6monkey.blogspot.fr - Cheeky4n6Monkey - Learning About Digital Forensics

Example domain paragraphs

The (Badly) Illustrated Musings of a Cheeky Forensics Monkey ...

One of Monkey's co-workers ( Troy ) was able to provide investigators with a location of interest by looking at the device owner's Google Takeout "Location History.json".

Specifically, Troy looked at the DetectedActivity classification strings which Google (Play Services) uses to estimate whether the device was still, in a vehicle, on foot etc. There was a transition from IN_VEHICLE to STILL which indicated the vehicle had stopped at a location (and not just passed through).