What is the KnowledgeC database?
The KnowledgeC.db file contains a record of different processes that operate on an Apple device including application usage. Safari Internet history can also be recovered from the database.
The KnowledgeC.db file can be extracted from an Apple device using certain forensic software and can allow for an assessment of when an application was installed onto or uninstalled from the device, when the application was opened as well as searches performed.
The KnowledgeC database can also include information to determine when a device was locked or unlocked, which can provide either prove or disprove that the device was in use at a particular time.
It is also possible to identify when the device had been plugged into a computer or when it was connected to a charger from the content of the KnowledgeC database. Again, helping to prove whether the device was or was not in use at a certain point.
The KnowledgeC database can provide evidence to indicate whether the device was in use at a particular time and even allow for an assessment of what application was in use at that time.
Where is the KnowledgeC.db File Located?
The KnowledgeC database on an iOS device is located within the directory path /private/var/mobile/Library/Coreduet/Knowledge/ and on an OSX device is located at the path /root/Library/Application Support/Knowledge/.
About Athena Forensics
For information on our digital forensic services or if you require any advice or assistance please contact a member of our team on 0330 123 4448 or via email on enquiries@athenaforensics.co.uk, further details are available on our contact us page.
Our client’s confidentiality is of the utmost importance. All correspondence is treated with discretion, from initial contact to the conclusion of any computer forensic investigation.
Our digital forensics experts are fully aware of the significance and importance of the information that they encounter and we have been accredited to ISO 9001 for 10 years.
Our forensic experts are all security cleared and we offer non-disclosure agreements if required. Our premises along with our security procedures have been inspected and approved by law enforcement agencies.
Athena Forensics do not disclose personal information to other companies or suppliers.
https://athenaforensics.co.uk/service/mobile-phone-forensic-experts/
https://athenaforensics.co.uk/service/computer-forensic-experts/
