iOS devices allow third-party applications to store notes from the application onto the device. These notes are located in /mobile/Library/Notes/notes.sqlite, which is often parsed by the forensic tools. For native notes and iCloud notes, the location is /mobile/Containers/Shared/AppGroup/<GUID>/NoteStore.sqlite. These files will be covered further in a lab in section 4.