WifiConfigStore-- two different paths, make sure you know them.
So Android 10 and below, it's stored in one path.
Android 11 and 12, it's in that apexdata.
You're going to find different hot spots, Wi-Fi connections
that the user connected to, if it's auto
join, if it's randomized, all this information
is going to be stored here.
You will also see previous ones that were within range of it.
Now, the reason auto join is so important--
I traveled to Australia to teach Forensics 585
about four years ago.
And I was interested on what my data would
look like on Android and iOS.
So what I did was I extracted my data while I was there.
I did some activity for about 24 hours in Australia.
And I wanted to see, did it look futuristic?
Did anything stay in Eastern time?
How did the data appear?
The one inconsistency that caused confusion was Wi-Fi.
If it's auto join enabled or a favorite or your preferred
network, when I was in Australia,
it looked like it joined WineLove.
And I was so confused why the tools
were parsing that, on that date, it joined WineLove.
It didn't.
It just scans for it every single time
it's trying to connect to Wi-Fi because it's
your preferred network.
So make sure you're always looking for things like auto
join and if it's preferred.