Exploring the application directory presents us with an additional file that wasn’t parsed by our tool. The session file also contains the FAVORITES in the event that they are used as a starting or endpoint for directions.

It is important to note that data isn’t always stored nicely and neatly in a database. In this case, GPS coordinates are stored in their inverse throughout some important data files. In an application that is already parsed by commercial tools, this should not pose a problem as you sift through important data.

Review files other than databases and look for fewer standard ways of storing data. Each application is unique, and therefore those less popular applications often need the most attention.

When we initially reviewed the parsed geolocation data for this application, we noticed that only two coordinates were parsed, but taking a deeper look at the application’s directory, you can start to notice that the application is making use of files other than SQLite to store the bulk of the user data. These files that aren’t parsed are often a good source of user-created data.