Blog >> Android Waze

Investigating Android Waze

31/05/2024 Friday

Waze is a widely used mapping and navigation application. It is a community-driven navigation app that provides real-time road alerts and an up-to-the-moment map. The tools have features that provide users instant updates about traffic, crashes, police, and more.

Digital Forensics Value of Android Waze

Regarding mobile forensics GPS and location artifacts are a crucial part of the investigation. Therefore, the Waze application holds significant forensic value. Artifacts related to the user’s favorite places and recent places can be parsed from Waze application data on the Android device. The application also records shared places and events, which can give valuable insight into user activity.

Location of Android Waze Artifacts

Android Waze artifacts can be found at the following location:
data/data/com.waze/user.db

Analyzing Android Waze Artifacts with ArtiFast

This section will discuss how to use ArtiFast to extract Android Waze artifact from Android devoces' files and what kind of digital forensics insights we can gain from the artifact.

After you have created your case and added evidence for the investigation, at the Artifact Selection phase, you can select Android Waze artifact parsers:

Once ArtiFast parsers plugins complete processing the artifact for analysis, it can be reviewed via “Artifact View” or “Timeline View,” with indexing, filtering, and searching capabilities. Below is a detailed description of Android Waze artifact in ArtiFast.

Android Waze Places

• Name: The Place Name.
• Street: The Address Street of the Place.
• City: The city name of the place.
• State: The state name of the place.
• Country: The Country name of the place.
• House: The house number of the place.
• Longitude: The longitude of the place.
• Latitude: The latitude of the place.
• Created Date: The date and time the place was created.

Android Waze Favorite Places

• Name: The favorite place name.
• Street: The street name of the favorite place.
• City: The city of the favorite place.
• State: The state of the favorite place.
• Country: The country name of the favorite place.
• House: The house number of the favorite place.
• Longitude: The longitude of the favorite place.
• Latitude: The latitude of the favorite place.
• Rank: The rank number of the favorite place.
• Created Date: The date and time the favorite place was created.
• Modified Date: The date and time the favorite place was modified.
• Access Date: The date and time the favorite place was accessed.

Android Waze Events

• Name: The name of the event place.
• Street: The street of the event place.
• City: The city of the event place.
• State: The state of the event place.
• Country: The country of the event place.
• House: The house of the event place.
• Longitude: The longitude of the event place.
• Latitude: The latitude of the event place.
• Event Start Date: The Event Start Date of the event place.
• End Event Date: The End Event Date of the event place.
• Created Date: The Created Date of the event place.

Android Waze Notifications

• Name: The address name of the notification alert.
• Street: The street name of the notification alert.
• City: The city name of the notification alert.
• State: The state name of the notification alert.
• Country: The country name of the notification alert.
• House: The house name of the notification alert.
• Longitude: The longitude name of the notification alert.
• Latitude: The latitude name of the notification alert.
• Contact Hash: The contact hash name of the notification alert.
• Notification Date: The date when the notification was created.

Android Waze Recent Places

• Name: The name of the recent event.
• Street: The street of the recent event.
• City: The city of the recent event.
• State: The state of the recent event.
• Country: The country of the recent event.
• House: The house of the recent event.
• Longitude: The longitude of the recent event.
• Latitude: The latitude of the recent event.
• Created Date: The Created Date of the recent event.
• Access Date: The Access Date of the recent event.

Android Waze Shared Places

• Name: The name of the shared place.
• Street: The street of the shared place.
• City: The city of the shared place.
• State: The state of the shared place.
• Country: The country of the shared place.
• House: The house of the shared place.
• Longitude: The longitude of the shared place.
• Latitude: The latitude of the shared place.
• Owner ID: The owner ID of the shared place.
• Shared ID: The shared ID of the shared place.
• Share Date: The Share Date of the shared place.
• Created Date: The Created Date of the shared place.
• Access Date: The Access Date of the shared place.

For more information or suggestions please contact: ekrma.elnour@forensafe.com