Practical exercise to map GPS coordinates extracted
This lab guide provides a step-by-step practical exercise to map GPS coordinates extracted from an Autopsy investigation using open-source mapping tools.
Lab Objective
In this lab, you will act as a forensic analyst. You will take the raw geolocation data extracted from the calendar.db file in Autopsy (33.529455426023574, -112.0847381568517) and map it to identify the physical meeting location of the suspect and the supplier.
Prerequisites & Tools
The target GPS coordinates:
33.529455426023574, -112.0847381568517An internet browser.
Access to an open mapping tool (e.g., Google Maps or OpenStreetMap).
Step 1: Analyze and Format the Coordinates
Before plugging data into mapping software, you must understand its structure.
Latitude (North/South):
33.529455426023574Longitude (East/West):
-112.0847381568517Step 2: Input the Data into a Mapping Tool
Open your web browser and navigate to
.Google Maps Click on the Search bar in the upper left corner.
Copy and paste the coordinates exactly as they appeared in Autopsy, separated by a comma:
33.529455426023574, -112.0847381568517- Press Enter or click the search icon.
Observe where the red map pin drops. Zoom in using the + button to view street-level details.
Switch from the standard map view to Satellite view (usually in the lower-left corner) to examine the physical surroundings.
Identify the landmark.
- Analysis observation: These coordinates point directly to a specific retail/commercial parking lot area in Phoenix, Arizona.
* หากมีข้อมูลข้อผิดพลาดประการใด ขออภัยมา ณ ที่นี้ด้วย รบกวนแจ้ง Admin เพื่อแก้ไขต่อไป
ขอบคุณครับ
#WindowsForensic #ComputerForensics #dfir #forensics #digitalforensics #computerforensic #investigation #cybercrime #fraud

No comments:
Post a Comment