Let's now dive in to some of these location artifacts.
So first things first, there's a lot going on in this slide.
This is one that we can't really hide
from you what it is because it says Waze Favorites at the top.
So on the left, we see under Locations,
we see Waze Favorites 2.
And you're following instructions, so you're like,
you know what?
I'm going to triage with my tool.
So you look at what the tool tells you.
You have timestamps.
You have positions.
But you remember what I taught you,
so you click on the source.
It takes you to this database, user.db.
You go down to Places and Favorites,
and you confirm that there's two and that the tool got it right.
Make sure the data is correctly interpreted.
Make sure the numbers match up.
Always follow the source.
But because you're inquisitive, you
see other items next to user.db, and you dig a little bit
deeper.