Beyond the map: Life360 location data

Automated mobile forensic tools efficiently parse application artifacts but can overlook residual data stored in undocumented or non-standard locations. Life360, a widely used location-sharing application, retains historically significant location data within database structures that are often missed by modern forensic suites. This presentation explores manual file-carving techniques and lesser-known Life360 artifact locations that can yield additional investigative value when validated through examiner-driven analysis.

Attendees will gain insight into where these artifacts persist, and how manual verification strengthens evidentiary completeness. The session also introduces a free, law-enforcement-only software tool developed to assist examiners in identifying and extracting these residual Life360 artifacts while maintaining transparent and defensible forensic workflows.