Iwc_dump-- now, this is one of those files
where it is tracking when you leave a wireless location.
So think about this.
I am traveling here in Berkeley, California.
I connect to the hotel Wi-Fi.
iwc_dump.txt knows every single time I leave that hotel.
Most people don't even think about this.
So let's say, I'm on a phone call,
and I'm currently using Wi-Fi calling.
I walk out of the hotel.
I continue that call, and maybe I walk two miles down the road.
I'm then on cellular.
That call will be tracked per the initial connection.
So if you looked at it, that call
would show that it initiated on Wi-Fi.
However, it continued on cellular.
When you timeline and you associate something
to iwc_dump.txt, maybe you throw in some health data from
the Android--
because even if you don't have an Android wearable,
having the Android in your pocket
is tracking all the steps you take,
all the places you're going.
Correlate that with whether.
It could really assist you with locations.
It also tracks how frequently you enter
and exit these zones of Wi-Fi.
So think of the impact of that was stalking investigations,
possible terrorism.
So a lot of the terrorism cases you will work,
people will scope out their target.
They will go within range of it to see
what it looks like, where they're going to attack,
how they can get into these environments
to then detonate bombs or do active shooting.
All of these things make forensics so much easier.
I want to mention, if you carve for additional location
artifacts in Physical Analyzer, you will uncover dme.db.
You will uncover iwc_dump.txt.
To be honest, that's how I found it.